{ "type": "bundle", "id": "bundle--50ba2a80-2388-599a-9820-243f43d43c69", "objects": [ { "type": "x-oak-tactic", "spec_version": "2.1", "id": "x-oak-tactic--2e70bb4c-e25c-5123-b9aa-c8f5f53ca2f0", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Token Genesis", "description": "Pre-launch / Launch", "x_oak_shortname": "token-genesis", "external_references": [ { "source_name": "oak", "external_id": "OAK-T1", "url": "https://onchainattack.org/#/tactic/OAK-T1" } ] }, { "type": "x-oak-tactic", "spec_version": "2.1", "id": "x-oak-tactic--54ff19cd-6a14-595b-be41-49018e597919", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Bridge and Cross-Chain", "description": "Targeted compromise", "x_oak_shortname": "bridge-and-cross-chain", "external_references": [ { "source_name": "oak", "external_id": "OAK-T10", "url": "https://onchainattack.org/#/tactic/OAK-T10" } ] }, { "type": "x-oak-tactic", "spec_version": "2.1", "id": "x-oak-tactic--a05710d6-773d-5671-81e6-1a9d53ce156a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Custody and Signing Infrastructure", "description": "Targeted compromise", "x_oak_shortname": "custody-and-signing-infrastructure", "external_references": [ { "source_name": "oak", "external_id": "OAK-T11", "url": "https://onchainattack.org/#/tactic/OAK-T11" } ] }, { "type": "x-oak-tactic", "spec_version": "2.1", "id": "x-oak-tactic--4a289ef4-441e-58b3-869d-49ccfdee57a4", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "NFT-Specific Patterns", "description": "Realization", "x_oak_shortname": "nft-specific-patterns", "external_references": [ { "source_name": "oak", "external_id": "OAK-T12", "url": "https://onchainattack.org/#/tactic/OAK-T12" } ] }, { "type": "x-oak-tactic", "spec_version": "2.1", "id": "x-oak-tactic--3ec189b1-7483-5eec-bd93-b8191e1c508c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Account Abstraction Attacks", "description": "Targeted compromise", "x_oak_shortname": "account-abstraction-attacks", "external_references": [ { "source_name": "oak", "external_id": "OAK-T13", "url": "https://onchainattack.org/#/tactic/OAK-T13" } ] }, { "type": "x-oak-tactic", "spec_version": "2.1", "id": "x-oak-tactic--8bad0643-6df7-5354-80c9-005cb836b58c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Validator / Staking / Restaking Attacks", "description": "Targeted compromise", "x_oak_shortname": "validator-staking-restaking-attacks", "external_references": [ { "source_name": "oak", "external_id": "OAK-T14", "url": "https://onchainattack.org/#/tactic/OAK-T14" } ] }, { "type": "x-oak-tactic", "spec_version": "2.1", "id": "x-oak-tactic--805d835b-8d16-5215-ab2a-a5a008681adb", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Off-chain Entry-Vector / Pre-Positioning", "description": "Pre-positioning", "x_oak_shortname": "off-chain-entry-vector-pre-positioning", "external_references": [ { "source_name": "oak", "external_id": "OAK-T15", "url": "https://onchainattack.org/#/tactic/OAK-T15" } ] }, { "type": "x-oak-tactic", "spec_version": "2.1", "id": "x-oak-tactic--85e7f358-8dce-57fe-9f3a-4b0a0a048a69", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Governance / Voting Manipulation", "description": "Realization", "x_oak_shortname": "governance-voting-manipulation", "external_references": [ { "source_name": "oak", "external_id": "OAK-T16", "url": "https://onchainattack.org/#/tactic/OAK-T16" } ] }, { "type": "x-oak-tactic", "spec_version": "2.1", "id": "x-oak-tactic--72fc0a09-f385-516c-82bb-a08b6fd3d57c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Market Manipulation", "description": "Realization", "x_oak_shortname": "market-manipulation", "external_references": [ { "source_name": "oak", "external_id": "OAK-T17", "url": "https://onchainattack.org/#/tactic/OAK-T17" } ] }, { "type": "x-oak-tactic", "spec_version": "2.1", "id": "x-oak-tactic--83a8e7a7-61ec-58d1-a664-22dce505f924", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Liquidity Establishment", "description": "Pre-launch / Launch", "x_oak_shortname": "liquidity-establishment", "external_references": [ { "source_name": "oak", "external_id": "OAK-T2", "url": "https://onchainattack.org/#/tactic/OAK-T2" } ] }, { "type": "x-oak-tactic", "spec_version": "2.1", "id": "x-oak-tactic--c9583e28-ae7b-5589-8d5b-0d4334bcbb6a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Holder Capture", "description": "Pre-launch / Launch", "x_oak_shortname": "holder-capture", "external_references": [ { "source_name": "oak", "external_id": "OAK-T3", "url": "https://onchainattack.org/#/tactic/OAK-T3" } ] }, { "type": "x-oak-tactic", "spec_version": "2.1", "id": "x-oak-tactic--462dc46f-d3c8-5956-9fcd-83fd745b277a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Access Acquisition", "description": "Targeted compromise", "x_oak_shortname": "access-acquisition", "external_references": [ { "source_name": "oak", "external_id": "OAK-T4", "url": "https://onchainattack.org/#/tactic/OAK-T4" } ] }, { "type": "x-oak-tactic", "spec_version": "2.1", "id": "x-oak-tactic--b951d3f3-4d67-579b-8cae-b48eed3aa59f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Value Extraction", "description": "Realization", "x_oak_shortname": "value-extraction", "external_references": [ { "source_name": "oak", "external_id": "OAK-T5", "url": "https://onchainattack.org/#/tactic/OAK-T5" } ] }, { "type": "x-oak-tactic", "spec_version": "2.1", "id": "x-oak-tactic--7fa7f00b-059a-5a92-b145-0893b4530bb6", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Defense Evasion", "description": "Cross-cutting", "x_oak_shortname": "defense-evasion", "external_references": [ { "source_name": "oak", "external_id": "OAK-T6", "url": "https://onchainattack.org/#/tactic/OAK-T6" } ] }, { "type": "x-oak-tactic", "spec_version": "2.1", "id": "x-oak-tactic--5fc49855-8bca-5500-b810-322019badf15", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Laundering", "description": "Post-extraction", "x_oak_shortname": "laundering", "external_references": [ { "source_name": "oak", "external_id": "OAK-T7", "url": "https://onchainattack.org/#/tactic/OAK-T7" } ] }, { "type": "x-oak-tactic", "spec_version": "2.1", "id": "x-oak-tactic--d70463dd-edee-5226-9d2b-4921dac73b9b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Operator Continuity / Attribution Signals", "description": "Post-extraction", "x_oak_shortname": "operator-continuity-attribution-signals", "external_references": [ { "source_name": "oak", "external_id": "OAK-T8", "url": "https://onchainattack.org/#/tactic/OAK-T8" } ] }, { "type": "x-oak-tactic", "spec_version": "2.1", "id": "x-oak-tactic--d3f737a3-09cc-571c-88eb-d5e9e251167d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Smart-Contract Exploit", "description": "Realization", "x_oak_shortname": "smart-contract-exploit", "external_references": [ { "source_name": "oak", "external_id": "OAK-T9", "url": "https://onchainattack.org/#/tactic/OAK-T9" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--3113300f-d067-5bda-b93a-de6cb0044037", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Modifiable Tax Function", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "token-genesis" }, { "kill_chain_name": "oak", "phase_name": "defense-evasion" } ], "x_oak_platforms": [ "EVM", "Solana" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T1.001", "url": "https://onchainattack.org/#/technique/OAK-T1.001" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--91a0a76b-eaf0-5e8a-b6b9-7f62268ce853", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Token-2022 Permanent Delegate Authority", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "token-genesis" }, { "kill_chain_name": "oak", "phase_name": "defense-evasion" } ], "x_oak_platforms": [ "Solana" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T1.002", "url": "https://onchainattack.org/#/technique/OAK-T1.002" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--aa324a54-0e77-513e-bc77-dea4683702d2", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Renounced-But-Not-Really (Proxy-Upgrade Backdoor)", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "token-genesis" }, { "kill_chain_name": "oak", "phase_name": "defense-evasion" } ], "x_oak_platforms": [ "EVM (primary)" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T1.003", "url": "https://onchainattack.org/#/technique/OAK-T1.003" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--e45221c4-74e9-52ab-8e20-96d05003d65a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Blacklist / Pausable Transfer Weaponization", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "token-genesis" }, { "kill_chain_name": "oak", "phase_name": "defense-evasion" } ], "x_oak_platforms": [ "EVM (primary)" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T1.004", "url": "https://onchainattack.org/#/technique/OAK-T1.004" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--00534efe-a713-54c9-9ef3-5b12fd6d0c01", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Hidden Fee-on-Transfer", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "token-genesis" }, { "kill_chain_name": "oak", "phase_name": "defense-evasion" } ], "x_oak_platforms": [ "EVM (primary)", "Solana (SPL via Token-2022 transfer-fee extension; secondary)" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T1.005", "url": "https://onchainattack.org/#/technique/OAK-T1.005" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--c90dbca1-780a-54c2-a24e-3f6d4472a134", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Honeypot-by-Design", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "token-genesis" } ], "x_oak_platforms": [ "EVM (BNB Chain dominant by deployment count; Base, Ethereum); cross-chain" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T1.006", "url": "https://onchainattack.org/#/technique/OAK-T1.006" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--f80bec40-b7fa-52eb-a6a4-d4acd59dce38", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Token-2022 Transfer-Hook Abuse", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "token-genesis" }, { "kill_chain_name": "oak", "phase_name": "defense-evasion" } ], "x_oak_platforms": [ "Solana (SPL Token-2022); cross-standard analogues on EVM (ERC-777 `tokensReceived`, ERC-1363 transfer-and-call, ERC-4626 vault hooks) covered separately at OAK-T9.005" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T1.007", "url": "https://onchainattack.org/#/technique/OAK-T1.007" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--cf39fa63-9044-5279-8ea5-4acb64d53904", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Validator / Signer Key Compromise", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "bridge-and-cross-chain" } ], "x_oak_platforms": [ "EVM", "cross-chain" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T10.001", "url": "https://onchainattack.org/#/technique/OAK-T10.001" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--44a15cd3-db68-5127-b8dd-cb96e537e3b7", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Message-Verification Bypass", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "bridge-and-cross-chain" } ], "x_oak_platforms": [ "EVM", "Solana", "cross-chain" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T10.002", "url": "https://onchainattack.org/#/technique/OAK-T10.002" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--96edd229-3959-5861-a34c-22ea8ac739d0", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Off-chain Observer Source-Event Forgery", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "bridge-and-cross-chain" }, { "kill_chain_name": "oak", "phase_name": "token-genesis" } ], "x_oak_platforms": [ "chain-agnostic (anchors on Solana → 18 destination chains, XRP Ledger → Coreum, Tron, Unichain → Ethereum, and Arc → Robinhood Chain)" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T10.002.001", "url": "https://onchainattack.org/#/technique/OAK-T10.002.001" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--37433c31-ae6a-50f0-bfe3-22ac2f1747d9", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Cross-Chain Replay", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "bridge-and-cross-chain" } ], "x_oak_platforms": [ "EVM", "cross-chain" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T10.003", "url": "https://onchainattack.org/#/technique/OAK-T10.003" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--8a373cd0-d1fc-5d17-916d-993d5cd3e7c1", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Optimistic-Bridge Fraud-Proof Gap", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "bridge-and-cross-chain" } ], "x_oak_platforms": [ "EVM", "cross-chain (any optimistic-message-verification or optimistic-rollup-bridged architecture)" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T10.004", "url": "https://onchainattack.org/#/technique/OAK-T10.004" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--4950a164-f5b6-579d-b44d-af445947d99e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Light-Client Verification Bypass", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "bridge-and-cross-chain" } ], "x_oak_platforms": [ "EVM", "Cosmos / IBC", "Bitcoin SPV consumers", "cross-chain (any bridge whose security reduces to a cryptographic light-client or proof-verification primitive)" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T10.005", "url": "https://onchainattack.org/#/technique/OAK-T10.005" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--0a436476-4fd9-5f9a-9735-7d7a9bf791ae", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Cross-Chain Governance Relay Attack", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "bridge-and-cross-chain" } ], "x_oak_platforms": [ "Cross-chain (any protocol stack where governance actions are relayed across chains via a message bridge — LayerZero, Wormhole, Chainlink CCIP, Hyperlane, Axelar); target chains typically EVM or EVM-compatible" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T10.006", "url": "https://onchainattack.org/#/technique/OAK-T10.006" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--6cfeff7d-dc66-543b-b2f6-8e5e232156bc", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Bridge Validator Economic-Incentive Misalignment", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "bridge-and-cross-chain" } ], "x_oak_platforms": [ "Cross-chain (any bridge whose security model relies on a validator set bonded by economic stake — Ronin/Sky Mavis, Wormhole (pre-Guardian-set expansion), Axie Infinity bridge, Polygon PoS bridge, Ronin DPoS, any PoS-style validator bridge where the validator's stake is independent of the bridge's TVL)" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T10.007", "url": "https://onchainattack.org/#/technique/OAK-T10.007" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--24a6791d-c43c-503e-95ea-b86c31e56872", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Bridge Observer Signature Scope Truncation (DEPRECATED)", "kill_chain_phases": [], "x_oak_platforms": [], "external_references": [ { "source_name": "oak", "external_id": "OAK-T10.008", "url": "https://onchainattack.org/#/technique/OAK-T10.008" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--801ea2cb-7842-52ae-9311-023b6cd74e62", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Cross-Chain Token Configuration-Role Capture", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "bridge-and-cross-chain" } ], "x_oak_platforms": [ "Cross-chain (any omnichain-token standard that carries per-deployment configuration roles — LayerZero OFT `delegate` / `peer`, Wormhole NTT manager and transceiver roles, Chainlink CCIP token-pool administration, Hyperlane warp-route ownership); remote deployments are typically EVM" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T10.009", "url": "https://onchainattack.org/#/technique/OAK-T10.009" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--2a21b0c6-c06c-5130-9114-0d760dcb5b2c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Third-Party Signing-Vendor UI / Signing-Flow Compromise", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "custody-and-signing-infrastructure" } ], "x_oak_platforms": [ "EVM", "Solana", "cross-chain" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T11.001", "url": "https://onchainattack.org/#/technique/OAK-T11.001" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--9552d7a9-3083-569f-a641-d880fc8a27d5", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Wallet-Software Distribution Compromise", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "custody-and-signing-infrastructure" } ], "x_oak_platforms": [ "multi-chain (any chain the affected wallet supports)" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T11.002", "url": "https://onchainattack.org/#/technique/OAK-T11.002" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--0de49898-b977-5cf7-9608-eff3285c50c7", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "In-Use Multisig Smart-Contract Manipulation", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "custody-and-signing-infrastructure" }, { "kill_chain_name": "oak", "phase_name": "smart-contract-exploit" } ], "x_oak_platforms": [ "EVM" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T11.003", "url": "https://onchainattack.org/#/technique/OAK-T11.003" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--052caee2-c494-51c7-87d3-0b5ae531eeb2", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Insufficient-Entropy Key Generation", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "custody-and-signing-infrastructure" } ], "x_oak_platforms": [ "chain-agnostic (any ECDSA / EdDSA-curve chain whose end-user keys are produced by an off-chain generator); canonical anchors on Ethereum" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T11.004", "url": "https://onchainattack.org/#/technique/OAK-T11.004" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--f43b3cdc-ed19-5ad0-b661-706c665d9f83", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Operator-side Fake-Platform Fraud", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "custody-and-signing-infrastructure" } ], "x_oak_platforms": [ "chain-agnostic (deposit substrate is BTC / ETH / stablecoins on-chain; the fraud \"platform\" is off-chain operator-controlled UI/database)" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T11.005", "url": "https://onchainattack.org/#/technique/OAK-T11.005" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--6d6dfb01-6c40-58c3-ac5a-98b6042866bd", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Fake-CEX / Pig-Butchering Platform", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "custody-and-signing-infrastructure" }, { "kill_chain_name": "oak", "phase_name": "token-genesis" } ], "x_oak_platforms": [ "chain-agnostic (deposit substrate is BTC / ETH / stablecoins on-chain; the fraud \"platform\" is off-chain operator-controlled UI/database)" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T11.005.001", "url": "https://onchainattack.org/#/technique/OAK-T11.005.001" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--aebe2a72-a361-5ab4-8465-3a32a4dbd638", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Fake-Custodian / Fake-Asset-Manager Fraud", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "custody-and-signing-infrastructure" }, { "kill_chain_name": "oak", "phase_name": "token-genesis" } ], "x_oak_platforms": [ "chain-agnostic (deposit substrate is BTC / ETH / stablecoins on-chain; the fraud \"platform\" is off-chain operator-controlled UI/database)" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T11.005.002", "url": "https://onchainattack.org/#/technique/OAK-T11.005.002" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--a9cff60c-a2e1-5a72-ad92-358506cc8678", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Compound-Operated Investment-Fraud Platforms", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "custody-and-signing-infrastructure" }, { "kill_chain_name": "oak", "phase_name": "token-genesis" } ], "x_oak_platforms": [ "chain-agnostic; deposit substrate is BTC / ETH / stablecoins (USDT on Tron dominant); industrial-scale victim-acquisition infrastructure predominantly in Southeast Asia" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T11.005.003", "url": "https://onchainattack.org/#/technique/OAK-T11.005.003" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--0fd4fcde-3464-5d2d-86ac-7c68035870a3", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Cold-storage Seed-phrase Exfiltration at Rest", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "custody-and-signing-infrastructure" } ], "x_oak_platforms": [ "chain-agnostic (the substrate-of-extraction is the BIP39 seed phrase / private key material itself; downstream extraction occurs across whichever chains the affected wallet holds)" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T11.006", "url": "https://onchainattack.org/#/technique/OAK-T11.006" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--8ebc4ef1-736a-5a29-a376-a008444a2d2f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "User-Initiated Plaintext-Equivalent Seed Storage", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "custody-and-signing-infrastructure" }, { "kill_chain_name": "oak", "phase_name": "token-genesis" } ], "x_oak_platforms": [ "chain-agnostic (BIP39 seed phrase / private key material stored in third-party service; downstream extraction across all chains the affected wallet holds)" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T11.006.001", "url": "https://onchainattack.org/#/technique/OAK-T11.006.001" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--19b22847-2104-5eb9-a74c-4e7ef6195ab8", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Implicit Cloud-Custody via Default-On Cloud-Backup", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "custody-and-signing-infrastructure" }, { "kill_chain_name": "oak", "phase_name": "token-genesis" } ], "x_oak_platforms": [ "chain-agnostic (wallet vault auto-backed-up to iCloud / Google Drive / OneDrive; downstream extraction across all chains the wallet supports)" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T11.006.002", "url": "https://onchainattack.org/#/technique/OAK-T11.006.002" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--040f06e8-1825-51bd-8145-52c5b97b26d5", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Hardware-wallet Supply-chain / Physical-access Compromise", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "custody-and-signing-infrastructure" } ], "x_oak_platforms": [ "chain-agnostic (the substrate-of-extraction is the BIP39 seed phrase / hardware-wallet-controlled private-key material; downstream extraction occurs across whichever chains the affected wallet supports)" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T11.007", "url": "https://onchainattack.org/#/technique/OAK-T11.007" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--88316cc3-a9f9-5dc9-96e0-0f8889ca0234", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Counterfeit-Hardware Substitution", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "custody-and-signing-infrastructure" }, { "kill_chain_name": "oak", "phase_name": "token-genesis" } ], "x_oak_platforms": [ "chain-agnostic (counterfeit device substitutes the legitimate hardware wallet; downstream extraction across all chains the affected wallet supports)" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T11.007.001", "url": "https://onchainattack.org/#/technique/OAK-T11.007.001" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--fef61756-5074-52ac-8731-3cd76a564130", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Physical-Access Hardware-Side Seed Extraction", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "custody-and-signing-infrastructure" }, { "kill_chain_name": "oak", "phase_name": "token-genesis" } ], "x_oak_platforms": [ "chain-agnostic (physical-access attack against the hardware wallet's microcontroller; downstream extraction across all chains the wallet supports)" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T11.007.002", "url": "https://onchainattack.org/#/technique/OAK-T11.007.002" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--8477975b-da56-555e-8bc4-de888d978403", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Brand-Trust-Leveraged Active Phishing for Seed-Phrase Exfiltration", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "custody-and-signing-infrastructure" }, { "kill_chain_name": "oak", "phase_name": "token-genesis" } ], "x_oak_platforms": [ "chain-agnostic (phishing campaigns target hardware-wallet users across all chains their devices support)" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T11.007.003", "url": "https://onchainattack.org/#/technique/OAK-T11.007.003" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--0955e8c5-f474-5ac6-bbb8-b53b80ef6c0b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Embedded-Wallet Identity-Provider Compromise", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "custody-and-signing-infrastructure" } ], "x_oak_platforms": [ "EVM (Polygon-resident Polymarket / Magic Labs canonical at v0.1; cross-chain analogues across Privy / Web3Auth / Dynamic deployments on Ethereum, Base, Arbitrum, Solana, others)" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T11.008", "url": "https://onchainattack.org/#/technique/OAK-T11.008" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--414a6469-36be-5ecd-9603-290930d42b86", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Trader-Tooling Supply-Chain Compromise targeting `.env` Private Keys", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "custody-and-signing-infrastructure" } ], "x_oak_platforms": [ "chain-agnostic (the substrate-of-extraction is the developer-environment plaintext key file; downstream extraction occurs across whichever chains the bot operates on — Polygon, Solana, Ethereum, Base, Arbitrum, BNB Chain are all in scope across the cohort)" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T11.009", "url": "https://onchainattack.org/#/technique/OAK-T11.009" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--bf1f9ad7-4abc-5204-8d5c-d597d194c7e0", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Off-chain Counterparty-Risk Insolvency", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "custody-and-signing-infrastructure" } ], "x_oak_platforms": [ "chain-agnostic (deposit substrate is BTC / ETH / stablecoins on-chain; the failure mode is off-chain operator credit decision → counterparty default → customer-asset shortfall)" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T11.010", "url": "https://onchainattack.org/#/technique/OAK-T11.010" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--d56864b8-d792-56b8-8190-be436238825d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Multi-chain Key-store Co-location", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "custody-and-signing-infrastructure" } ], "x_oak_platforms": [ "chain-agnostic (the anti-pattern is an operator-side architectural decision, not a chain-specific vulnerability)" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T11.011", "url": "https://onchainattack.org/#/technique/OAK-T11.011" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--4cad59ea-0942-5afc-a239-32ab4e740836", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Server-side Raw Private-Key Storage (Custodial Trading-Bot Anti-pattern)", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "custody-and-signing-infrastructure" } ], "x_oak_platforms": [ "chain-agnostic (the anti-pattern is an operator-side architectural decision, not a chain-specific vulnerability)" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T11.012", "url": "https://onchainattack.org/#/technique/OAK-T11.012" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--e3ca28d4-2eb0-5329-96df-65f6a1363709", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Legacy-Version Maintenance Attack Surface", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "custody-and-signing-infrastructure" } ], "x_oak_platforms": [ "EVM (primary); structurally generalisable to any chain where protocol operators maintain multiple deployed versions" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T11.013", "url": "https://onchainattack.org/#/technique/OAK-T11.013" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--1a600b6f-3cbd-5141-822e-9577e857e9ec", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Operator Privileged-Key Compromise", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "custody-and-signing-infrastructure" } ], "x_oak_platforms": [ "chain-agnostic" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T11.014", "url": "https://onchainattack.org/#/technique/OAK-T11.014" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--888de015-81a7-52ec-9832-87baca164029", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "NFT Wash-Trade Volume Inflation", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "nft-specific-patterns" } ], "x_oak_platforms": [ "EVM (primary; Ethereum / Polygon)", "Solana (Magic Eden, Tensor)" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T12.001", "url": "https://onchainattack.org/#/technique/OAK-T12.001" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--f7bfa62c-b23c-5fef-a74b-bca3b34cf4df", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Fake-Mint / Counterfeit Collection", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "nft-specific-patterns" } ], "x_oak_platforms": [ "EVM (primary; Ethereum / Polygon)", "Solana (Magic Eden cohort)" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T12.002", "url": "https://onchainattack.org/#/technique/OAK-T12.002" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--a4191d6c-02e1-5dae-aa08-2c4f908e10c5", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Royalty Bypass / Marketplace Manipulation", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "nft-specific-patterns" } ], "x_oak_platforms": [ "EVM (primary; Ethereum / Polygon / other ERC-721-bearing chains)" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T12.003", "url": "https://onchainattack.org/#/technique/OAK-T12.003" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--799fbda0-4923-5b9a-b86c-42acbeb6ff1d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Timelock-Free Protocol Upgrade Execution (DEPRECATED)", "kill_chain_phases": [], "x_oak_platforms": [], "external_references": [ { "source_name": "oak", "external_id": "OAK-T12.004", "url": "https://onchainattack.org/#/technique/OAK-T12.004" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--2f1b419b-a83f-5e94-b7fe-0d2f7f78c5df", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Flash-Loan Governance Vote Manipulation (DEPRECATED)", "kill_chain_phases": [], "x_oak_platforms": [], "external_references": [ { "source_name": "oak", "external_id": "OAK-T12.005", "url": "https://onchainattack.org/#/technique/OAK-T12.005" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--32b4e82c-f2a6-5104-a99e-51eefa81695f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "NFT-Collateral Lending Manipulation", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "nft-specific-patterns" } ], "x_oak_platforms": [ "EVM (primary — the NFT-lending population is overwhelmingly ERC-721 on Ethereum); structurally applicable to any chain with non-fungible collateral" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T12.006", "url": "https://onchainattack.org/#/technique/OAK-T12.006" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--1ee085bf-8883-5633-8d72-6951adb3006d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Mint-Outcome Reroll (Revert-Until-Rare)", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "nft-specific-patterns" } ], "x_oak_platforms": [ "EVM (primary — requires atomic same-transaction revelation and a revertable transaction); applicable to any chain whose transactions are atomic and whose mint outcome is readable before commitment" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T12.007", "url": "https://onchainattack.org/#/technique/OAK-T12.007" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--569abf6d-a9fe-53f5-99c8-087ed904d622", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Hybrid Fungible / Non-Fungible Standard Accounting Divergence", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "nft-specific-patterns" } ], "x_oak_platforms": [ "EVM (the ERC-404 / BT404 hybrid family and the NFT-fractionalisation population are overwhelmingly EVM)" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T12.008", "url": "https://onchainattack.org/#/technique/OAK-T12.008" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--7a7e61f2-3d7c-5d61-90dc-9e198573731c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Paymaster Compromise", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "account-abstraction-attacks" } ], "x_oak_platforms": [ "EVM (ERC-4337 EntryPoint v0.6 / v0.7 / v0.8 / v0.9 deployments); EVM L2s with native account abstraction (zkSync Era, Starknet) where the paymaster role is analogous; conceptually portable to any chain whose execution model separates gas-sponsorship validation from execution" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T13.001", "url": "https://onchainattack.org/#/technique/OAK-T13.001" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--67bf8212-71d7-5c52-87fc-fa40b25fb11c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Paymaster Accounting Drain", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "account-abstraction-attacks" } ], "x_oak_platforms": [ "EVM (ERC-4337 EntryPoint v0.6 / v0.7 / v0.8 / v0.9 deployments); EVM L2s with native account abstraction (zkSync Era, Starknet) where the paymaster role is analogous" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T13.001.001", "url": "https://onchainattack.org/#/technique/OAK-T13.001.001" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--286d6367-67eb-51d1-8a4b-cb5bc3d012f4", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Paymaster Policy Bypass", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "account-abstraction-attacks" } ], "x_oak_platforms": [ "EVM (ERC-4337 EntryPoint v0.6 / v0.7 / v0.8 / v0.9 deployments); EVM L2s with native account abstraction; Solana (analogous fee-payer / Token-2022 paymaster surfaces — Kora advisory)" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T13.001.002", "url": "https://onchainattack.org/#/technique/OAK-T13.001.002" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--ba1ed4a4-51a0-58c0-a6ea-3742137d79b9", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Paymaster Reentrancy", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "account-abstraction-attacks" } ], "x_oak_platforms": [ "EVM (ERC-4337 EntryPoint v0.6 / v0.7 / v0.8 / v0.9 deployments); EVM L2s with native account abstraction" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T13.001.003", "url": "https://onchainattack.org/#/technique/OAK-T13.001.003" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--fbe93b94-384c-543f-9ae9-a73850f14a4f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Paymaster Griefing", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "account-abstraction-attacks" } ], "x_oak_platforms": [ "EVM (ERC-4337 EntryPoint v0.6 / v0.7 / v0.8 / v0.9 deployments); EVM L2s with native account abstraction" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T13.001.004", "url": "https://onchainattack.org/#/technique/OAK-T13.001.004" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--e12a0e1d-8dac-5395-b37b-b0aa20814db2", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Bundler MEV", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "account-abstraction-attacks" } ], "x_oak_platforms": [ "EVM (any chain with deployed ERC-4337 EntryPoint, including Ethereum mainnet, Polygon, Arbitrum, Optimism, Base, BNB Chain)" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T13.002", "url": "https://onchainattack.org/#/technique/OAK-T13.002" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--ff6b56c9-5bc9-5111-be9b-aa70a55951f1", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Session-Key Hijacking", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "account-abstraction-attacks" } ], "x_oak_platforms": [ "EVM (ERC-4337 / ERC-7579 smart accounts); Solana analogues out of scope at v0.1" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T13.003", "url": "https://onchainattack.org/#/technique/OAK-T13.003" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--320f06d5-906a-5b2f-a737-01b09ce60315", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "EIP-7702 Delegation Abuse", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "account-abstraction-attacks" } ], "x_oak_platforms": [ "EVM (Ethereum mainnet primary; cross-chain replay surface across all EIP-7702-activated chains)" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T13.004", "url": "https://onchainattack.org/#/technique/OAK-T13.004" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--980e72bb-7127-51de-9870-d8a88edc74f8", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Slashing-Condition Exploit", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "validator-staking-restaking-attacks" } ], "x_oak_platforms": [ "Ethereum (Beacon Chain / consensus layer)", "Cosmos-SDK family (Cosmos Hub, Osmosis, Injective, Terra, etc.)", "Polkadot / Kusama (NPoS)", "Solana (lite slashing model)", "restaking layers (EigenLayer, Symbiotic, Karak)", "interchain-security consumer chains" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T14.001", "url": "https://onchainattack.org/#/technique/OAK-T14.001" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--b28eb96d-c303-5027-bc7d-413c3659495a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "MEV-Boost Relay Attack", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "validator-staking-restaking-attacks" } ], "x_oak_platforms": [ "Ethereum (mainnet PoS; secondarily any EVM L1 running an MEV-Boost-compatible PBS sidecar — Holesky/Hoodi testnets, Gnosis Chain, etc.)" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T14.002", "url": "https://onchainattack.org/#/technique/OAK-T14.002" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--0658ea79-01b4-5c49-bb12-4c6e0876df4e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Restaking Cascading Risk", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "validator-staking-restaking-attacks" } ], "x_oak_platforms": [ "Ethereum L1 (canonical)", "EVM L2s with restaking-secured AVS", "Cosmos-style shared-security analogues" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T14.003", "url": "https://onchainattack.org/#/technique/OAK-T14.003" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--846cf1ff-739a-5199-abd6-5f09cc1aeeb0", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "LST/LRT Depeg-Cascade as Constrained-Primitive Sub-class", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "validator-staking-restaking-attacks" }, { "kill_chain_name": "oak", "phase_name": "token-genesis" } ], "x_oak_platforms": [ "Ethereum L1 canonical (Lido stETH; Renzo ezETH); EVM L2s and L1s with LST / LRT collateral integration into lending markets" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T14.003.001", "url": "https://onchainattack.org/#/technique/OAK-T14.003.001" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--80d7913d-0db0-5316-b436-9d914dd8669b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Liquid Restaking Token Pricing Manipulation", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "validator-staking-restaking-attacks" } ], "x_oak_platforms": [ "Ethereum L1 (canonical); any chain with restaking-secured AVS and liquid-restaking-token derivatives" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T14.004", "url": "https://onchainattack.org/#/technique/OAK-T14.004" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--c5adc3a0-7ace-5a7f-b629-506415142209", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Builder Censorship MEV Extraction", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "validator-staking-restaking-attacks" } ], "x_oak_platforms": [ "Ethereum L1 (canonical, via PBS/MEV-Boost); any chain with a proposer-builder separation (PBS) architecture where block builders can censor transactions at the block-construction layer" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T14.005", "url": "https://onchainattack.org/#/technique/OAK-T14.005" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--35ec0966-c5f8-584b-a05f-c614dec60791", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Validator/Proposer Liveness-Fault Griefing", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "validator-staking-restaking-attacks" } ], "x_oak_platforms": [ "Ethereum L1 (validator liveness faults and inactivity-leak penalties); Solana (validator downtime slash); Cosmos (jail-for-downtime); Polkadot (offline-slash); any Proof-of-Stake chain with liveness-fault penalties" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T14.006", "url": "https://onchainattack.org/#/technique/OAK-T14.006" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--7861ffbc-2d68-5482-ba5f-32e5a630a7a6", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Social Engineering of Operator Personnel", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "off-chain-entry-vector-pre-positioning" } ], "x_oak_platforms": [ "chain-agnostic (the social-engineering vector is off-chain; downstream on-chain manifestation is per-incident)" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T15.001", "url": "https://onchainattack.org/#/technique/OAK-T15.001" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--f0e70cea-8e64-51c4-9f64-09ea2bf642aa", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Supply-Chain / Vendor-Pipeline Compromise", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "off-chain-entry-vector-pre-positioning" } ], "x_oak_platforms": [ "chain-agnostic (the supply-chain compromise is off-chain; downstream on-chain manifestation is per-incident)" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T15.002", "url": "https://onchainattack.org/#/technique/OAK-T15.002" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--77b517cc-4b13-5a1b-8262-fb171254ddb5", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Operator-Endpoint Compromise (Developer Workstation / Signing Machine)", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "off-chain-entry-vector-pre-positioning" } ], "x_oak_platforms": [ "chain-agnostic (the endpoint compromise is off-chain; downstream on-chain manifestation is per-incident)" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T15.003", "url": "https://onchainattack.org/#/technique/OAK-T15.003" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--78f0aa7b-06b4-5266-b348-58db62932a71", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Operator-Side Credential Compromise (SSO / Cloud / Registrar / DNS / Package Registry)", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "off-chain-entry-vector-pre-positioning" } ], "x_oak_platforms": [ "chain-agnostic (the credential compromise is off-chain; downstream on-chain manifestation is per-incident)" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T15.004", "url": "https://onchainattack.org/#/technique/OAK-T15.004" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--94a03321-bd42-5ba5-a14c-869236fb3822", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Operator-Communication-Channel Takeover (Discord / X / Telegram)", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "off-chain-entry-vector-pre-positioning" } ], "x_oak_platforms": [ "chain-agnostic (the channel takeover is off-chain; downstream on-chain manifestation is per-incident)" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T15.005", "url": "https://onchainattack.org/#/technique/OAK-T15.005" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--a7929123-b1d5-5eee-b042-dc7812bdd713", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Impersonation via Verified Social-Account Compromise", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "off-chain-entry-vector-pre-positioning" } ], "x_oak_platforms": [ "chain-agnostic (the account compromise is off-chain; downstream on-chain extraction is per-incident)" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T15.006", "url": "https://onchainattack.org/#/technique/OAK-T15.006" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--b19923a2-b45b-5106-935d-f52d0d875a94", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Vote Takeover via Flash-Loan", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "governance-voting-manipulation" } ], "x_oak_platforms": [ "EVM (canonical anchors); cross-chain governance contracts inherit the surface where flash-loan liquidity exists in the same execution context as the voting-power-eligibility check" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T16.001", "url": "https://onchainattack.org/#/technique/OAK-T16.001" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--03407478-76ff-57d8-bf96-1cb5b5108d9d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Hostile-Vote Treasury Drain", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "governance-voting-manipulation" } ], "x_oak_platforms": [ "EVM", "Solana", "cross-chain (any DAO with on-chain governance over a treasury whose voting-token can be acquired or inflated by the attacker)" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T16.002", "url": "https://onchainattack.org/#/technique/OAK-T16.002" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--523b3321-6fd3-5d53-b04e-bbd114e8f317", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Delegation-Cluster Vote Takeover", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "governance-voting-manipulation" } ], "x_oak_platforms": [ "EVM (canonical anchors at Compound, Balancer, SushiSwap); cross-chain governance contracts inherit the surface where delegation-graph mechanics exist" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T16.003", "url": "https://onchainattack.org/#/technique/OAK-T16.003" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--3065cec6-1624-5c76-a1a6-417a305ecec3", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Snapshot / Off-chain Voting Exploitation", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "governance-voting-manipulation" } ], "x_oak_platforms": [ "chain-agnostic (off-chain Snapshot.org-class voting platforms operate independently of any specific chain; signature schemes vary)" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T16.004", "url": "https://onchainattack.org/#/technique/OAK-T16.004" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--ad24b94c-0c7f-5bac-bd56-cf837da9180b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Malicious Proposal Snowballing", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "governance-voting-manipulation" } ], "x_oak_platforms": [ "EVM (canonical anchors at Tornado Cash, Audius, Curio); cross-chain governance contracts inherit the surface where proposal payloads can contain `delegatecall` or storage-collision-mediated authority capture" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T16.005", "url": "https://onchainattack.org/#/technique/OAK-T16.005" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--13ac496a-4463-5007-af2b-d6cc9503a3ac", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Timelock-Free Governance Execution", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "governance-voting-manipulation" } ], "x_oak_platforms": [ "EVM (primary); any chain with proxy-upgrade patterns and governance-controlled upgrade authority" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T16.006", "url": "https://onchainattack.org/#/technique/OAK-T16.006" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--473b0aa4-1cea-57d5-a0a1-9114ebeb1de6", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Cross-Venue Arbitrage-Driven Price-Discovery Distortion", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "market-manipulation" } ], "x_oak_platforms": [ "chain-agnostic (cross-venue arbitrage is a continuous phenomenon across CEX / DEX venues on every chain with non-trivial trading activity; the load-bearing surface is the inter-venue spread, not the chain-level state)" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T17.001", "url": "https://onchainattack.org/#/technique/OAK-T17.001" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--fe838439-8aa4-5b23-9494-fde9e1d5637c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Liquidation-Cascade Engineering", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "market-manipulation" } ], "x_oak_platforms": [ "EVM (Aave / Compound / Maker / Liquity / Morpho / Spark canonical); Solana (Solend / Marginfi / Kamino); cross-chain liquidation-engine designs broadly inherit the surface" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T17.002", "url": "https://onchainattack.org/#/technique/OAK-T17.002" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--3419f870-c58f-5b87-b67d-829b01e4d724", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Spoofing / Cancel-Flood Order-Book Manipulation", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "market-manipulation" } ], "x_oak_platforms": [ "EVM-L2 (dYdX / GMX V2 perps / Aevo); Hyperliquid HyperEVM; Solana (Drift, Phoenix, Mango v4); cross-chain order-book-DEX designs broadly inherit the surface" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T17.003", "url": "https://onchainattack.org/#/technique/OAK-T17.003" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--be296581-d897-5922-9a9a-964e99817421", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "TWAP / Time-Window Manipulation Against DAO Treasury / Vesting Math", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "market-manipulation" } ], "x_oak_platforms": [ "EVM (Uniswap V2/V3 TWAP windows used as oracle reference; OpenZeppelin TimelockController / Compound Timelock-class windows; vesting-contract designs across OpenZeppelin VestingWallet / Sablier / Hedgey); cross-chain TWAP-consuming designs broadly inherit the surface" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T17.004", "url": "https://onchainattack.org/#/technique/OAK-T17.004" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--df7c55f8-7843-5ec8-af64-44eff860294b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "TWAP Oracle Manipulation via Multi-Block MEV", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "market-manipulation" } ], "x_oak_platforms": [ "EVM (primary); any chain with TWAP-based price oracles and public mempool" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T17.005", "url": "https://onchainattack.org/#/technique/OAK-T17.005" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--a55b5859-fa73-5cab-a342-82b97187ea20", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Single-Sided Liquidity Plant", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "liquidity-establishment" } ], "x_oak_platforms": [ "EVM", "Solana" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T2.001", "url": "https://onchainattack.org/#/technique/OAK-T2.001" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--2e0bf741-b432-58e7-8948-f5599bf0209e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Locked-Liquidity Spoof", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "liquidity-establishment" }, { "kill_chain_name": "oak", "phase_name": "defense-evasion" } ], "x_oak_platforms": [ "EVM", "BNB Chain", "Solana" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T2.002", "url": "https://onchainattack.org/#/technique/OAK-T2.002" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--a6cff4d8-210c-5f75-9fb5-0f3318e8f8c3", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Cross-Chain Locked-Liquidity Spoof", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "liquidity-establishment" }, { "kill_chain_name": "oak", "phase_name": "defense-evasion" } ], "x_oak_platforms": [ "EVM (Ethereum, BSC, Polygon, Arbitrum, Base)", "Solana", "cross-chain" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T2.003", "url": "https://onchainattack.org/#/technique/OAK-T2.003" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--39564b4f-4af2-5b1a-8405-eb8cf9d2f12b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Initial-Liquidity Backdoor", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "liquidity-establishment" }, { "kill_chain_name": "oak", "phase_name": "defense-evasion" } ], "x_oak_platforms": [ "EVM (Ethereum, BSC, Polygon, Arbitrum, Base)", "Solana" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T2.004", "url": "https://onchainattack.org/#/technique/OAK-T2.004" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--c61e4738-96bd-5980-be5f-a99ba4f12408", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Token Metadata Spoofing", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "liquidity-establishment" }, { "kill_chain_name": "oak", "phase_name": "defense-evasion" } ], "x_oak_platforms": [ "EVM (primary — ERC-20 name/symbol/decimals can differ from the canonical token the contract impersonates); Solana (secondary — SPL Token metadata URI manipulation); BSC (PancakeSwap token-impersonation wave 2021)" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T2.005", "url": "https://onchainattack.org/#/technique/OAK-T2.005" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--b027592f-baee-5d2a-9d15-925aa1b77941", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Sybil-Bundled Launch", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "holder-capture" } ], "x_oak_platforms": [ "EVM", "Solana" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T3.001", "url": "https://onchainattack.org/#/technique/OAK-T3.001" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--ea13efc1-d0df-532c-8add-3d39dcd29713", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Wash-Trade Volume Inflation", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "holder-capture" }, { "kill_chain_name": "oak", "phase_name": "market-manipulation" } ], "x_oak_platforms": [ "EVM", "Solana", "CEX (cross-venue)" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T3.002", "url": "https://onchainattack.org/#/technique/OAK-T3.002" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--b8d62a9c-14cd-503a-af8d-a26b825dffcd", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Coordinated Pump-and-Dump", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "holder-capture" }, { "kill_chain_name": "oak", "phase_name": "value-extraction" }, { "kill_chain_name": "oak", "phase_name": "market-manipulation" } ], "x_oak_platforms": [ "EVM", "Solana", "BSC", "CEX (cross-venue)" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T3.003", "url": "https://onchainattack.org/#/technique/OAK-T3.003" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--921bd515-01df-5ee1-a643-7138f8d1ee7c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Influencer-Amplified Promotion-and-Dump", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "holder-capture" }, { "kill_chain_name": "oak", "phase_name": "market-manipulation" } ], "x_oak_platforms": [ "EVM (Ethereum, Solana via Pump.fun, BNB Chain); cross-chain" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T3.004", "url": "https://onchainattack.org/#/technique/OAK-T3.004" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--03a52b22-ed85-5ba7-9142-73d4e20f0c5a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Fake-Validator Staking-Frontend Phishing", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "holder-capture" }, { "kill_chain_name": "oak", "phase_name": "access-acquisition" } ], "x_oak_platforms": [ "EVM (Lido staking, Rocket Pool); Solana (Marinade, Jito staking); Cosmos (validator delegation scams)" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T3.005", "url": "https://onchainattack.org/#/technique/OAK-T3.005" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--051a950d-5407-5e53-9a5f-1c6ab61d0f6b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Insider Multi-Vector Supply Extraction", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "holder-capture" }, { "kill_chain_name": "oak", "phase_name": "market-manipulation" } ], "x_oak_platforms": [ "EVM (Ethereum, Solana via Pump.fun); cross-chain" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T3.006", "url": "https://onchainattack.org/#/technique/OAK-T3.006" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--58002197-8183-530c-9eea-d2d8532a9008", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Permit2 Signature-Based Authority Misuse", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "access-acquisition" } ], "x_oak_platforms": [ "EVM" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T4.001", "url": "https://onchainattack.org/#/technique/OAK-T4.001" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--7ec6ff5b-83cd-5725-adda-2b5d3a846414", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Compromised Front-End Permit Solicitation", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "access-acquisition" }, { "kill_chain_name": "oak", "phase_name": "defense-evasion" } ], "x_oak_platforms": [ "EVM" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T4.002", "url": "https://onchainattack.org/#/technique/OAK-T4.002" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--4dd355bc-2389-55c4-911c-1bac3744dbbc", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Address Poisoning", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "access-acquisition" }, { "kill_chain_name": "oak", "phase_name": "defense-evasion" } ], "x_oak_platforms": [ "EVM (primary)", "Solana", "Tron" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T4.003", "url": "https://onchainattack.org/#/technique/OAK-T4.003" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--12a37f6f-1b04-52d2-9ad3-56bca9ba3350", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Allowance / Approve-Pattern Drainer", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "access-acquisition" } ], "x_oak_platforms": [ "EVM (primary)" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T4.004", "url": "https://onchainattack.org/#/technique/OAK-T4.004" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--92ca3ca4-e512-53c5-be45-1f8b05cc913b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "`setApprovalForAll` NFT Drainer", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "access-acquisition" } ], "x_oak_platforms": [ "EVM (primary; Ethereum / Polygon / BNB Chain)" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T4.005", "url": "https://onchainattack.org/#/technique/OAK-T4.005" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--75d94806-bc98-57dc-894c-8ba499eb5540", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "WalletConnect Session Hijack", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "access-acquisition" } ], "x_oak_platforms": [ "EVM (primary)", "Solana", "multi-chain (any chain WalletConnect supports)" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T4.006", "url": "https://onchainattack.org/#/technique/OAK-T4.006" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--79d99263-2431-5abd-bf5f-2869979031be", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Native-app Social Phishing on Engagement-Weighted Platforms", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "access-acquisition" } ], "x_oak_platforms": [ "EVM (Polygon-resident Polymarket canonical at v0.1; cross-platform analogues across Friend.tech, Pump.fun, Farcaster, and any platform with engagement-weighted in-platform distribution)" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T4.007", "url": "https://onchainattack.org/#/technique/OAK-T4.007" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--419b5ccf-6a56-5639-a130-82e3f14a544e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Fake-DEX Clone-Frontend Phishing", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "access-acquisition" } ], "x_oak_platforms": [ "EVM dominant (Uniswap / PancakeSwap / Lido / Curve / Stargate / Orbiter / Radiant / Zapper / DefiLlama clone-frontends); Solana (Raydium clone-frontends); cross-chain" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T4.008", "url": "https://onchainattack.org/#/technique/OAK-T4.008" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--8e90a636-2bbf-5517-9dc5-1516e3ff0df6", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Pre-token Brand-Anticipation Phishing", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "access-acquisition" } ], "x_oak_platforms": [ "EVM (primary); Solana (secondary; EigenLayer / zkSync anticipation cohort has cross-chain analogues on Solana-based protocol token-anticipation campaigns)" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T4.009", "url": "https://onchainattack.org/#/technique/OAK-T4.009" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--eaa6f530-4f94-5ca6-b2d9-cbb9f56636a0", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Fake Security-Tool / Browser-Extension Phishing", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "access-acquisition" } ], "x_oak_platforms": [ "EVM", "Solana (wallet-browser-extension surface is cross-chain; fake MetaMask, Rabby, Phantom, Trust Wallet extensions target the respective chain ecosystems); cross-chain" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T4.010", "url": "https://onchainattack.org/#/technique/OAK-T4.010" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--29109eef-abfb-5e17-af48-f9314fad8a9c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Push-Notification Infrastructure Compromise", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "access-acquisition" } ], "x_oak_platforms": [ "cross-chain (iOS/Android push-notification infrastructure is chain-agnostic; the downstream wallet-compromise surface spans all chains the affected wallet application supports)" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T4.011", "url": "https://onchainattack.org/#/technique/OAK-T4.011" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--e1cb4489-0672-54ec-83b8-188a224bac95", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Clipboard-Hijacker (Clipper) Address Substitution", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "access-acquisition" }, { "kill_chain_name": "oak", "phase_name": "defense-evasion" } ], "x_oak_platforms": [ "cross-chain (clippers are coin-agnostic — Bitcoin, Ethereum, Litecoin, Monero, Dogecoin, Tron, XRP, Solana, Cardano, Zcash, and others are matched by per-format address regex)" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T4.012", "url": "https://onchainattack.org/#/technique/OAK-T4.012" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--453ebde2-a358-531b-99b5-c9b532a849b8", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Endpoint Infostealer Wallet-Material and Credential Exfiltration", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "access-acquisition" } ], "x_oak_platforms": [ "cross-chain (commodity infostealers enumerate every browser-extension wallet and desktop wallet application present on the host regardless of chain — MetaMask, Phantom, Trust Wallet, Exodus, Electrum, and dozens more — plus raw key/keystore files)" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T4.013", "url": "https://onchainattack.org/#/technique/OAK-T4.013" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--5deeb2fb-1df3-5566-8229-2e83bd241a08", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Hard LP Drain", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "value-extraction" } ], "x_oak_platforms": [ "EVM", "Solana" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T5.001", "url": "https://onchainattack.org/#/technique/OAK-T5.001" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--647504b6-bc6d-5c30-b18d-82c99e51b62d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Slow LP Trickle Removal", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "value-extraction" }, { "kill_chain_name": "oak", "phase_name": "defense-evasion" } ], "x_oak_platforms": [ "EVM", "Solana" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T5.002", "url": "https://onchainattack.org/#/technique/OAK-T5.002" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--e66a56f1-221e-5079-bfe4-99ccbe842a5a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Hidden-Mint Dilution", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "value-extraction" } ], "x_oak_platforms": [ "EVM", "Solana" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T5.003", "url": "https://onchainattack.org/#/technique/OAK-T5.003" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--51de129b-35c6-52ab-baa1-4952b944dad8", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Sandwich / MEV Extraction", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "value-extraction" }, { "kill_chain_name": "oak", "phase_name": "market-manipulation" } ], "x_oak_platforms": [ "EVM" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T5.004", "url": "https://onchainattack.org/#/technique/OAK-T5.004" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--cccae07c-951c-54bd-bfa4-af87de266370", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Treasury-Management Exit", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "value-extraction" }, { "kill_chain_name": "oak", "phase_name": "defense-evasion" } ], "x_oak_platforms": [ "EVM", "Solana" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T5.005", "url": "https://onchainattack.org/#/technique/OAK-T5.005" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--99c728d0-3e0c-55a4-906f-55c349257e5d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Vesting Cliff Dump", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "value-extraction" } ], "x_oak_platforms": [ "EVM", "Solana", "Cosmos", "BNB Chain (any chain hosting time-locked allocation contracts)" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T5.006", "url": "https://onchainattack.org/#/technique/OAK-T5.006" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--f65581dd-3a77-50d8-b85f-c0df5e90b22f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Third-party Brand-impersonation Custodial Soft-rug", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "value-extraction" } ], "x_oak_platforms": [ "EVM (Polygon-resident Polymarket-branded canonical case at v0.1; cross-platform analogues across any high-trust platform whose brand can be impersonated by off-platform services — Polymarket, Hyperliquid, dYdX, Pump.fun, GMX, prediction-market and trader-tooling ecosystems)" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T5.007", "url": "https://onchainattack.org/#/technique/OAK-T5.007" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--f474475e-47e9-57d5-b8d1-35077726b770", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Ransomware Extortion Payment", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "value-extraction" } ], "x_oak_platforms": [ "Bitcoin (primary)", "Ethereum", "Monero (limited on-chain observability)" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T5.008", "url": "https://onchainattack.org/#/technique/OAK-T5.008" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--f05554c1-f308-5e98-8ef4-af1c993c4752", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Physical-Coercion Extraction (Wrench Attack)", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "value-extraction" } ], "x_oak_platforms": [ "chain-agnostic (any self-custodied or credential-accessible asset; the coercion is off-chain, the extraction transaction is on any chain the victim holds)" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T5.009", "url": "https://onchainattack.org/#/technique/OAK-T5.009" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--d9e4a005-06a9-5cee-9f7c-234e20790118", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Source-Verification Mismatch", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "defense-evasion" } ], "x_oak_platforms": [ "EVM (primary)" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T6.001", "url": "https://onchainattack.org/#/technique/OAK-T6.001" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--c23370e0-2f94-555e-8e18-e753a767bb51", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Fake Audit-Claim", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "defense-evasion" } ], "x_oak_platforms": [ "chain-agnostic (the failure mode lives off-chain; the underlying Technique it modifies may be on any chain)" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T6.002", "url": "https://onchainattack.org/#/technique/OAK-T6.002" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--5a491154-55c8-5abc-8449-0d48df41514b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Audit-of-Different-Bytecode-Version", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "defense-evasion" } ], "x_oak_platforms": [ "chain-agnostic (the failure mode is the audit-vs-deployed gap; the underlying Technique it modifies may be on any chain)" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T6.003", "url": "https://onchainattack.org/#/technique/OAK-T6.003" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--d275621f-df75-55ac-974a-4589472dde87", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Audit-Pending Marketing Claim", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "defense-evasion" } ], "x_oak_platforms": [ "chain-agnostic (the failure mode lives off-chain at the marketing-claim layer; the underlying Technique it modifies may be on any chain)" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T6.004", "url": "https://onchainattack.org/#/technique/OAK-T6.004" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--3be95af9-48b3-56a3-8e57-f07ac58e27f2", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Proxy-Upgrade Malicious Switching", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "defense-evasion" }, { "kill_chain_name": "oak", "phase_name": "token-genesis" }, { "kill_chain_name": "oak", "phase_name": "smart-contract-exploit" }, { "kill_chain_name": "oak", "phase_name": "bridge-and-cross-chain" } ], "x_oak_platforms": [ "EVM (primary); cross-chain bridge variants (Polkadot ⇄ EVM canonical at v0.1)" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T6.005", "url": "https://onchainattack.org/#/technique/OAK-T6.005" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--71ecfc99-0efa-5c66-ad46-d0a4851cee1c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Counterfeit Token Impersonation", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "defense-evasion" }, { "kill_chain_name": "oak", "phase_name": "access-acquisition" }, { "kill_chain_name": "oak", "phase_name": "value-extraction" } ], "x_oak_platforms": [ "EVM (primary); cross-chain bridge variants (Polkadot ⇄ EVM canonical at v0.1)" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T6.006", "url": "https://onchainattack.org/#/technique/OAK-T6.006" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--a019d6df-047d-5759-8cee-e8de54595ade", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Trust-substrate Shift / Vendor-side Promise Revocation", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "defense-evasion" } ], "x_oak_platforms": [ "chain-agnostic (the substrate-of-revocation is the vendor / regulator / infrastructure-policy claim; the realised effect is on user-side threat-model construction across whichever chains the affected product operates)" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T6.007", "url": "https://onchainattack.org/#/technique/OAK-T6.007" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--af731cf1-9b12-550c-b56b-8ad41735e526", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Verified-but-Malicious Frontend Routing", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "defense-evasion" } ], "x_oak_platforms": [ "EVM (primary); cross-chain DEX-router analogues (Solana Jupiter routing-manipulation, cross-chain bridge routing-path insertion) are pipeline anchor candidates at v0.x" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T6.008", "url": "https://onchainattack.org/#/technique/OAK-T6.008" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Mixer-Routed Hop", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "laundering" } ], "x_oak_platforms": [ "EVM", "Bitcoin", "cross-chain" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T7.001", "url": "https://onchainattack.org/#/technique/OAK-T7.001" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--e69d7f82-fe18-5677-abba-9dd6347bc5a2", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "CEX Deposit-Address Layering", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "laundering" } ], "x_oak_platforms": [ "EVM", "Solana", "Bitcoin", "cross-chain" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T7.002", "url": "https://onchainattack.org/#/technique/OAK-T7.002" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--093e472c-281c-5e78-9228-486255d3058a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Cross-Chain Bridge Laundering", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "laundering" } ], "x_oak_platforms": [ "EVM", "Solana", "Bitcoin", "cross-chain" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T7.003", "url": "https://onchainattack.org/#/technique/OAK-T7.003" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--a33bad38-8e4f-5cdd-a0a4-779143c81d8d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "NFT Wash-Laundering", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "laundering" } ], "x_oak_platforms": [ "EVM (primary; Ethereum / Polygon)" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T7.004", "url": "https://onchainattack.org/#/technique/OAK-T7.004" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--a7ebcbb2-dafe-5364-9932-e3d7bee02596", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Privacy-Chain Hops", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "laundering" } ], "x_oak_platforms": [ "EVM", "Bitcoin", "cross-chain", "Monero", "Zcash" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T7.005", "url": "https://onchainattack.org/#/technique/OAK-T7.005" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--2addb763-67df-5522-8864-f3f0d400252a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "DeFi Yield-Strategy Laundering", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "laundering" } ], "x_oak_platforms": [ "EVM", "Solana", "cross-chain (within-chain laundering rail per chain)" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T7.006", "url": "https://onchainattack.org/#/technique/OAK-T7.006" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--c6390ae8-9835-52c2-8fd7-fac5b37acc18", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "DEX Aggregator Routing Laundering", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "laundering" } ], "x_oak_platforms": [ "EVM (primary); DEX aggregator deployments (1inch, 0x/Matcha, Paraswap, CowSwap, Odos, KyberSwap aggregator) are predominantly EVM-native; cross-chain aggregators (Li.Fi, Socket/Bungee, Across) compound the surface with T7.003 bridging" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T7.007", "url": "https://onchainattack.org/#/technique/OAK-T7.007" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--fccf2600-ec82-53d1-b3ba-0384a28f8be3", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Stablecoin Issuer Freeze-Asymmetry Laundering", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "laundering" } ], "x_oak_platforms": [ "EVM (USDC/USDT/DAI primary); cross-chain (issuer freeze capability varies by chain deployment); the technique is chain-agnostic wherever a freeze-capable stablecoin is deployed" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T7.008", "url": "https://onchainattack.org/#/technique/OAK-T7.008" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--07314232-9e18-5d07-b8a6-6ce0ffec7200", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Sanctioned-Entity and Illicit-Purpose Financing", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "laundering" }, { "kill_chain_name": "oak", "phase_name": "operator-continuity-attribution-signals" } ], "x_oak_platforms": [ "Bitcoin (primary for OFAC-designated addresses)", "Ethereum", "TRON (increasing share of illicit-purpose transaction volume post-2022)" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T7.009", "url": "https://onchainattack.org/#/technique/OAK-T7.009" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--28abf537-2707-58ba-99aa-5a6cef69eb87", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Travel Rule Evasion", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "laundering" } ], "x_oak_platforms": [ "all (Travel Rule applies at the VASP layer, not the chain layer)" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T7.010", "url": "https://onchainattack.org/#/technique/OAK-T7.010" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--bf6ef44d-fa93-5733-862a-26c1ac15a4b4", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Common-Funder Cluster Reuse", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "operator-continuity-attribution-signals" } ], "x_oak_platforms": [ "EVM", "Solana" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T8.001", "url": "https://onchainattack.org/#/technique/OAK-T8.001" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--1d0e4f47-8c77-58a2-b885-f44145ed3bf4", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Cross-Chain Operator Continuity", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "operator-continuity-attribution-signals" } ], "x_oak_platforms": [ "cross-chain" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T8.002", "url": "https://onchainattack.org/#/technique/OAK-T8.002" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--7c80fbf5-2de5-5802-a501-b5e28b2e5b10", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "On-Chain Transaction Graph De-Anonymization", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "operator-continuity-attribution-signals" } ], "x_oak_platforms": [ "chain-agnostic (Bitcoin UTXO graph, Ethereum account graph, Solana account graph)" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T8.003", "url": "https://onchainattack.org/#/technique/OAK-T8.003" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--3d929810-93ce-5bc0-bdcf-2128db844b95", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Exchange Account Farming / Sybil Account Creation", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "operator-continuity-attribution-signals" } ], "x_oak_platforms": [ "chain-agnostic (exchange-side operational surface)" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T8.004", "url": "https://onchainattack.org/#/technique/OAK-T8.004" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--a508cca2-dfea-5831-9bd5-f7d69abe422b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Operational Security Procedural Failure (Non-Technical OpSec)", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "operator-continuity-attribution-signals" } ], "x_oak_platforms": [ "chain-agnostic (off-chain attribution surface)" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T8.005", "url": "https://onchainattack.org/#/technique/OAK-T8.005" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--f5bce1e3-3637-56df-8db9-94e793306171", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Oracle Price Manipulation", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "smart-contract-exploit" }, { "kill_chain_name": "oak", "phase_name": "market-manipulation" } ], "x_oak_platforms": [ "EVM", "Solana" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T9.001", "url": "https://onchainattack.org/#/technique/OAK-T9.001" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--f81933a4-bfe2-528f-94ef-399577e5a682", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Flash-Loan-Enabled Exploit", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "smart-contract-exploit" } ], "x_oak_platforms": [ "EVM", "Solana", "cross-chain" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T9.002", "url": "https://onchainattack.org/#/technique/OAK-T9.002" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--b6a77deb-14ae-59e3-b4b2-b73065972b6c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Governance Attack", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "smart-contract-exploit" } ], "x_oak_platforms": [ "EVM", "cross-chain" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T9.003", "url": "https://onchainattack.org/#/technique/OAK-T9.003" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--9b65ffc8-0be6-5809-b228-a85033f790ba", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Access-Control Misconfiguration", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "smart-contract-exploit" } ], "x_oak_platforms": [ "EVM", "Solana", "cross-chain" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T9.004", "url": "https://onchainattack.org/#/technique/OAK-T9.004" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--fd40fed2-9093-5b5a-8ebd-5b288e3ae6c5", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Reentrancy", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "smart-contract-exploit" } ], "x_oak_platforms": [ "EVM (primary); EVM-compatible L2s; conceptually applicable to any chain whose execution model allows external calls before state finalisation" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T9.005", "url": "https://onchainattack.org/#/technique/OAK-T9.005" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--b0b659a0-71d1-5943-b57e-96082367adef", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Subjective-Oracle Resolution Manipulation", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "smart-contract-exploit" }, { "kill_chain_name": "oak", "phase_name": "market-manipulation" } ], "x_oak_platforms": [ "EVM (Polygon-resident Polymarket / Ethereum-resident UMA DVM canonical at v0.1; cross-chain analogues across Kleros, Reality.eth, Augur REP)" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T9.006", "url": "https://onchainattack.org/#/technique/OAK-T9.006" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--5c19685a-578d-5a35-969d-4ad75a1ab78a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "DVM Vote Capture by Economically-Interested Holder", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "smart-contract-exploit" }, { "kill_chain_name": "oak", "phase_name": "market-manipulation" } ], "x_oak_platforms": [ "EVM (Polymarket on Polygon / UMA DVM on Ethereum canonical at v0.1)" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T9.006.001", "url": "https://onchainattack.org/#/technique/OAK-T9.006.001" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--b10815cf-cfad-5b45-97a2-61614ce86053", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Resolution-Spec Ambiguity Exploitation", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "smart-contract-exploit" }, { "kill_chain_name": "oak", "phase_name": "market-manipulation" } ], "x_oak_platforms": [ "EVM (Polymarket on Polygon / UMA DVM on Ethereum canonical at v0.1)" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T9.006.002", "url": "https://onchainattack.org/#/technique/OAK-T9.006.002" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--f783bf18-a6db-5a11-bcbf-3ad4892f9214", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Off-chain Resolution-Source Coercion", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "smart-contract-exploit" }, { "kill_chain_name": "oak", "phase_name": "market-manipulation" } ], "x_oak_platforms": [ "EVM (Polymarket on Polygon canonical at v0.1)" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T9.006.003", "url": "https://onchainattack.org/#/technique/OAK-T9.006.003" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--6cd5a72f-146d-5a9f-8324-beebe7a70c42", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Operational-Insider Trading on Subjective-Resolution Prediction Markets", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "smart-contract-exploit" }, { "kill_chain_name": "oak", "phase_name": "market-manipulation" } ], "x_oak_platforms": [ "EVM (Polymarket on Polygon canonical at v0.1)" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T9.006.004", "url": "https://onchainattack.org/#/technique/OAK-T9.006.004" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--4811e8a5-d083-595e-b7f6-e0193347aa3e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Platform-Override of Oracle Outcome", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "smart-contract-exploit" }, { "kill_chain_name": "oak", "phase_name": "market-manipulation" } ], "x_oak_platforms": [ "EVM (Polymarket on Polygon / UMA DVM on Ethereum canonical at v0.1)" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T9.006.005", "url": "https://onchainattack.org/#/technique/OAK-T9.006.005" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--8fea3d14-6b55-534c-986e-1c6f3d1638f2", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Fork-Substrate Vulnerability (Not Mitigated at Fork Time)", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "smart-contract-exploit" } ], "x_oak_platforms": [ "EVM (primary); cross-chain analogues (forked-protocols deployed on non-EVM chains) are pipeline anchor candidates at v0.x" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T9.007", "url": "https://onchainattack.org/#/technique/OAK-T9.007" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--df0b8ece-6ded-558d-9e29-22e289c4243b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Diamond-Pattern Facet-Audit Incomplete", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "smart-contract-exploit" }, { "kill_chain_name": "oak", "phase_name": "defense-evasion" } ], "x_oak_platforms": [ "EVM (primary; EIP-2535 diamond pattern is EVM-native); non-EVM diamond-pattern analogues (proxy-facet architectures on Solana, Sui, Aptos) are pipeline anchor candidates at v0.x" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T9.008", "url": "https://onchainattack.org/#/technique/OAK-T9.008" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--3a083d84-7478-5068-afe8-ad797d870993", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Cross-Contract Reinitialization Attack", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "smart-contract-exploit" } ], "x_oak_platforms": [ "EVM (primary); any chain whose execution model allows cross-contract calls during initialisation (upgradeable proxy patterns are EVM-native but the reinitialisation surface generalises)" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T9.009", "url": "https://onchainattack.org/#/technique/OAK-T9.009" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--1d4fc21d-4b26-53e8-a8fd-cef3f68b421d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Read-Only Reentrancy", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "smart-contract-exploit" } ], "x_oak_platforms": [ "EVM (primary); any chain whose execution model allows `staticcall` to a contract that is mid-execution in the same transaction" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T9.010", "url": "https://onchainattack.org/#/technique/OAK-T9.010" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--e9d0e479-5424-55c4-ab48-976a7a671010", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Precision-Loss Rounding Attack", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "smart-contract-exploit" } ], "x_oak_platforms": [ "EVM (primary); any chain whose arithmetic model uses integer division with floor/truncation rounding" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T9.011", "url": "https://onchainattack.org/#/technique/OAK-T9.011" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--85d1ecc7-0698-5daf-88bc-d6dc81788dd2", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Initial Liquidity Sandwich Attack (DEPRECATED)", "kill_chain_phases": [], "x_oak_platforms": [], "external_references": [ { "source_name": "oak", "external_id": "OAK-T9.012", "url": "https://onchainattack.org/#/technique/OAK-T9.012" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--54be17f0-8dd4-5ea7-8043-93eb5530c507", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Slippage-Manipulation Sandwich Attack", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "smart-contract-exploit" } ], "x_oak_platforms": [ "EVM (primary — Uniswap-style AMMs with user-specified slippage tolerance); Solana (Jupiter DCA / limit-order slippage surface); any chain with an AMM that exposes user-configurable slippage parameters in swap transactions" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T9.013", "url": "https://onchainattack.org/#/technique/OAK-T9.013" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--5d6fd913-d256-5849-b154-bff6af32ce81", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Protocol-Client Consensus Bug", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "smart-contract-exploit" } ], "x_oak_platforms": [ "Bitcoin (canonical anchor, Bitcoin Core); Liquid Network / Bitcoin sidechain (Elements); Zcash (zcashd Orchard circuit); structurally generalisable to any blockchain whose consensus is determined by a reference-client implementation (Ethereum, Solana, Cosmos SDK chains, etc.)" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T9.014", "url": "https://onchainattack.org/#/technique/OAK-T9.014" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--aad54a89-4a6f-5019-a80b-997786799f80", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Degenerate-Input Signature-Verification Bypass", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "smart-contract-exploit" } ], "x_oak_platforms": [ "chain-agnostic (any runtime whose contracts verify signatures or proofs over an elliptic curve — EVM, Hedera, Cosmos, Solana, Move-family; the defect is in the verifier's input validation, not in the chain)" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T9.015", "url": "https://onchainattack.org/#/technique/OAK-T9.015" } ] }, { "type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--50650ed5-e07d-5fe8-9adf-7adb33f8182e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Contract Accounting / State-Invariant Flaw", "kill_chain_phases": [ { "kill_chain_name": "oak", "phase_name": "smart-contract-exploit" } ], "x_oak_platforms": [ "chain-agnostic (EVM, Solana, Move-family, Starknet — the defect is in contract logic, not the runtime)" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-T9.016", "url": "https://onchainattack.org/#/technique/OAK-T9.016" } ] }, { "type": "course-of-action", "spec_version": "2.1", "id": "course-of-action--65aa1681-44d0-5121-8849-2b866abc876c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Source-Bytecode Verification", "description": "OAK OAK-M01 — class: detection; audience: vendor, risk-team, venue", "external_references": [ { "source_name": "oak", "external_id": "OAK-M01", "url": "https://onchainattack.org/#/mitigation/OAK-M01" } ] }, { "type": "course-of-action", "spec_version": "2.1", "id": "course-of-action--0e4b3b55-5f84-5074-9b3b-9404e99b67fd", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Static-Analysis Pre-Deployment", "description": "OAK OAK-M02 — class: architecture; audience: protocol, designer", "external_references": [ { "source_name": "oak", "external_id": "OAK-M02", "url": "https://onchainattack.org/#/mitigation/OAK-M02" } ] }, { "type": "course-of-action", "spec_version": "2.1", "id": "course-of-action--6b5af533-e806-54c4-8fe5-f990131e41d0", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Continuous Bytecode-Diff Monitoring", "description": "OAK OAK-M03 — class: detection; audience: vendor, risk-team", "external_references": [ { "source_name": "oak", "external_id": "OAK-M03", "url": "https://onchainattack.org/#/mitigation/OAK-M03" } ] }, { "type": "course-of-action", "spec_version": "2.1", "id": "course-of-action--a82e10db-dcf6-5231-8299-6cedb873560e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Funder-Graph Clustering", "description": "OAK OAK-M04 — class: detection; audience: vendor, risk-team", "external_references": [ { "source_name": "oak", "external_id": "OAK-M04", "url": "https://onchainattack.org/#/mitigation/OAK-M04" } ] }, { "type": "course-of-action", "spec_version": "2.1", "id": "course-of-action--82833c64-290a-554c-bc31-c2af67f2cab2", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Authority-Graph Enumeration", "description": "OAK OAK-M05 — class: detection; audience: custody-customer, risk-team, vendor", "external_references": [ { "source_name": "oak", "external_id": "OAK-M05", "url": "https://onchainattack.org/#/mitigation/OAK-M05" } ] }, { "type": "course-of-action", "spec_version": "2.1", "id": "course-of-action--6959c20e-2277-5961-9bda-ee8f1c8278dc", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Mempool / Pre-Block Telemetry", "description": "OAK OAK-M06 — class: detection; audience: vendor, trader, protocol", "external_references": [ { "source_name": "oak", "external_id": "OAK-M06", "url": "https://onchainattack.org/#/mitigation/OAK-M06" } ] }, { "type": "course-of-action", "spec_version": "2.1", "id": "course-of-action--34d3bf3c-54f7-5956-a7dd-c969cdace21f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Cross-Chain Attribution Graph", "description": "OAK OAK-M07 — class: detection; audience: vendor, risk-team, venue", "external_references": [ { "source_name": "oak", "external_id": "OAK-M07", "url": "https://onchainattack.org/#/mitigation/OAK-M07" } ] }, { "type": "course-of-action", "spec_version": "2.1", "id": "course-of-action--6f0b252d-02b3-56a4-9512-65438d2d5e9c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Per-Spender Approval Audit and Revocation", "description": "OAK OAK-M08 — class: wallet-ux; audience: wallet, custody-customer, vendor", "external_references": [ { "source_name": "oak", "external_id": "OAK-M08", "url": "https://onchainattack.org/#/mitigation/OAK-M08" } ] }, { "type": "course-of-action", "spec_version": "2.1", "id": "course-of-action--59d11b85-db9b-56b3-b911-a06869c26471", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "TWAP + Multi-Venue Oracle with Deviation Circuit-Breaker", "description": "OAK OAK-M09 — class: architecture; audience: protocol, designer", "external_references": [ { "source_name": "oak", "external_id": "OAK-M09", "url": "https://onchainattack.org/#/mitigation/OAK-M09" } ] }, { "type": "course-of-action", "spec_version": "2.1", "id": "course-of-action--043ecb34-7344-5ca6-af88-d9a3b208abd7", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Checks-Effects-Interactions and ReentrancyGuard", "description": "OAK OAK-M10 — class: architecture; audience: protocol, designer", "external_references": [ { "source_name": "oak", "external_id": "OAK-M10", "url": "https://onchainattack.org/#/mitigation/OAK-M10" } ] }, { "type": "course-of-action", "spec_version": "2.1", "id": "course-of-action--fc65c84f-75b3-5fab-884f-4dd9bf5cf33f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Rate-Limiting and Per-Block Caps", "description": "OAK OAK-M11 — class: architecture; audience: protocol, designer", "external_references": [ { "source_name": "oak", "external_id": "OAK-M11", "url": "https://onchainattack.org/#/mitigation/OAK-M11" } ] }, { "type": "course-of-action", "spec_version": "2.1", "id": "course-of-action--4985a1a6-d512-58c4-ac01-565e47a16316", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Per-Message Replay Binding", "description": "OAK OAK-M12 — class: architecture; audience: protocol, designer (bridge / cross-chain)", "external_references": [ { "source_name": "oak", "external_id": "OAK-M12", "url": "https://onchainattack.org/#/mitigation/OAK-M12" } ] }, { "type": "course-of-action", "spec_version": "2.1", "id": "course-of-action--d2facfb9-55b5-57f6-a4d4-f8133a8d943e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Long Challenge Window with Economic Challenger Incentives", "description": "OAK OAK-M13 — class: architecture; audience: protocol, designer (optimistic-bridge / rollup)", "external_references": [ { "source_name": "oak", "external_id": "OAK-M13", "url": "https://onchainattack.org/#/mitigation/OAK-M13" } ] }, { "type": "course-of-action", "spec_version": "2.1", "id": "course-of-action--b33cf8ae-db6f-5385-8594-a8cb71ace431", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Multi-Prover Redundancy", "description": "OAK OAK-M14 — class: architecture; audience: protocol, designer (zk-bridge / zk-rollup)", "external_references": [ { "source_name": "oak", "external_id": "OAK-M14", "url": "https://onchainattack.org/#/mitigation/OAK-M14" } ] }, { "type": "course-of-action", "spec_version": "2.1", "id": "course-of-action--5ea92caa-6e87-5630-a816-3f5d3ae7ed34", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Threshold Signing with Operator Separation", "description": "OAK OAK-M15 — class: architecture; audience: custody-customer, custody-vendor, protocol (bridge)", "external_references": [ { "source_name": "oak", "external_id": "OAK-M15", "url": "https://onchainattack.org/#/mitigation/OAK-M15" } ] }, { "type": "course-of-action", "spec_version": "2.1", "id": "course-of-action--dbcae7d1-60fb-5bbb-8aa5-ece44830e988", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Pre-Deployment Audit and Formal Verification", "description": "OAK OAK-M16 — class: architecture; audience: protocol, designer", "external_references": [ { "source_name": "oak", "external_id": "OAK-M16", "url": "https://onchainattack.org/#/mitigation/OAK-M16" } ] }, { "type": "course-of-action", "spec_version": "2.1", "id": "course-of-action--01f02050-cc06-593c-a921-e8ab898f429a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Time-Locked Governance and Multi-Block Quorum", "description": "OAK OAK-M17 — class: architecture; audience: protocol, designer (governance)", "external_references": [ { "source_name": "oak", "external_id": "OAK-M17", "url": "https://onchainattack.org/#/mitigation/OAK-M17" } ] }, { "type": "course-of-action", "spec_version": "2.1", "id": "course-of-action--3e4307df-8595-57e2-a65d-b8aaaa23e81d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Out-of-Band Destination Verification", "description": "OAK OAK-M18 — class: operational; audience: custody-customer, custody-vendor", "external_references": [ { "source_name": "oak", "external_id": "OAK-M18", "url": "https://onchainattack.org/#/mitigation/OAK-M18" } ] }, { "type": "course-of-action", "spec_version": "2.1", "id": "course-of-action--be9a2640-cc30-5674-b229-2d5f1bd94f8b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Air-Gap Cold-Wallet Signing", "description": "OAK OAK-M19 — class: operational; audience: custody-customer", "external_references": [ { "source_name": "oak", "external_id": "OAK-M19", "url": "https://onchainattack.org/#/mitigation/OAK-M19" } ] }, { "type": "course-of-action", "spec_version": "2.1", "id": "course-of-action--2a2b0ba1-d486-52c0-92c5-95e040a51134", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Vendor Breach-Notification SLA", "description": "OAK OAK-M20 — class: operational; audience: custody-customer, risk-team, venue", "external_references": [ { "source_name": "oak", "external_id": "OAK-M20", "url": "https://onchainattack.org/#/mitigation/OAK-M20" } ] }, { "type": "course-of-action", "spec_version": "2.1", "id": "course-of-action--37102889-cc74-5f7d-8d19-48568d94a335", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Anti-Phishing Training for Privileged Staff", "description": "OAK OAK-M21 — class: operational; audience: custody-customer, custody-vendor, protocol", "external_references": [ { "source_name": "oak", "external_id": "OAK-M21", "url": "https://onchainattack.org/#/mitigation/OAK-M21" } ] }, { "type": "course-of-action", "spec_version": "2.1", "id": "course-of-action--8382e168-bf14-5b22-ad8a-f6843ae9917d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Rotate-on-Disclosure Discipline", "description": "OAK OAK-M22 — class: operational; audience: custody-customer, custody-vendor, protocol", "external_references": [ { "source_name": "oak", "external_id": "OAK-M22", "url": "https://onchainattack.org/#/mitigation/OAK-M22" } ] }, { "type": "course-of-action", "spec_version": "2.1", "id": "course-of-action--a1ff9392-2106-56ff-8788-2000d14f5b0a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Audit-Attestation Public-Registry Verification", "description": "OAK OAK-M23 — class: venue; audience: venue, risk-team, trader", "external_references": [ { "source_name": "oak", "external_id": "OAK-M23", "url": "https://onchainattack.org/#/mitigation/OAK-M23" } ] }, { "type": "course-of-action", "spec_version": "2.1", "id": "course-of-action--0b9f4268-084a-5bb8-8b77-9eb905dc2028", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Out-of-Band Audit-Engagement Verification", "description": "OAK OAK-M24 — class: venue; audience: venue, risk-team, trader", "external_references": [ { "source_name": "oak", "external_id": "OAK-M24", "url": "https://onchainattack.org/#/mitigation/OAK-M24" } ] }, { "type": "course-of-action", "spec_version": "2.1", "id": "course-of-action--e8f1a172-e586-55bf-ac18-f2e71868823f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Listing-Time Source-Verification + Audit-Status Gate", "description": "OAK OAK-M25 — class: venue; audience: venue (CEX, DEX aggregator), aggregator (token-data, market-data), launchpad", "external_references": [ { "source_name": "oak", "external_id": "OAK-M25", "url": "https://onchainattack.org/#/mitigation/OAK-M25" } ] }, { "type": "course-of-action", "spec_version": "2.1", "id": "course-of-action--44f6d12e-3515-5504-9aa4-41bb152664a1", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Wash-Trade-Rate Metrics at Marketplace Layer", "description": "OAK OAK-M26 — class: venue; audience: venue (NFT marketplace, DEX), aggregator (analytics), risk-team", "external_references": [ { "source_name": "oak", "external_id": "OAK-M26", "url": "https://onchainattack.org/#/mitigation/OAK-M26" } ] }, { "type": "course-of-action", "spec_version": "2.1", "id": "course-of-action--ea2c1b0f-ebc9-54e2-a68f-314c8380f1f9", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Travel Rule and KYC at Privacy-Chain Boundary", "description": "OAK OAK-M27 — class: venue; audience: venue (CEX, OTC desk, instant-swap service), regulator, risk-team", "external_references": [ { "source_name": "oak", "external_id": "OAK-M27", "url": "https://onchainattack.org/#/mitigation/OAK-M27" } ] }, { "type": "course-of-action", "spec_version": "2.1", "id": "course-of-action--04901282-62d1-524a-9961-55cb58e18f73", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Token-Unlock Calendar Integration", "description": "OAK OAK-M28 — class: venue; audience: venue (DEX aggregator, CEX, market-data aggregator), risk-team, trader", "external_references": [ { "source_name": "oak", "external_id": "OAK-M28", "url": "https://onchainattack.org/#/mitigation/OAK-M28" } ] }, { "type": "course-of-action", "spec_version": "2.1", "id": "course-of-action--58f0baa5-432b-5765-9598-e2a051775f86", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Full-Address Verification and Lookalike Detection", "description": "OAK OAK-M29 — class: wallet-ux; audience: wallet (mobile, browser-extension, hardware-wallet companion), custody-customer, risk-team", "external_references": [ { "source_name": "oak", "external_id": "OAK-M29", "url": "https://onchainattack.org/#/mitigation/OAK-M29" } ] }, { "type": "course-of-action", "spec_version": "2.1", "id": "course-of-action--ef85cd4e-91fe-5597-bf63-13f0b2627b36", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Per-dApp Domain and App-Store-Package Allowlist", "description": "OAK OAK-M30 — class: wallet-ux; audience: wallet (mobile, browser-extension), custody-customer", "external_references": [ { "source_name": "oak", "external_id": "OAK-M30", "url": "https://onchainattack.org/#/mitigation/OAK-M30" } ] }, { "type": "course-of-action", "spec_version": "2.1", "id": "course-of-action--ef3a9258-2595-51be-841c-aa3bbfb353de", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "EIP-712 Permit Display and Signing-Risk Heuristics", "description": "OAK OAK-M31 — class: wallet-ux; audience: wallet (mobile, browser-extension, hardware-wallet companion), custody-customer", "external_references": [ { "source_name": "oak", "external_id": "OAK-M31", "url": "https://onchainattack.org/#/mitigation/OAK-M31" } ] }, { "type": "course-of-action", "spec_version": "2.1", "id": "course-of-action--5ada4075-2650-59b9-ba11-0f7c0ebad320", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Bug Bounty Programs", "description": "OAK OAK-M32 — class: operational; audience: protocol, designer, vendor", "external_references": [ { "source_name": "oak", "external_id": "OAK-M32", "url": "https://onchainattack.org/#/mitigation/OAK-M32" } ] }, { "type": "course-of-action", "spec_version": "2.1", "id": "course-of-action--b91ae2ee-bab0-592d-a5e0-91bab1b0ca18", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Decentralized Insurance Protocols", "description": "OAK OAK-M33 — class: operational; audience: trader, protocol, custody-customer", "external_references": [ { "source_name": "oak", "external_id": "OAK-M33", "url": "https://onchainattack.org/#/mitigation/OAK-M33" } ] }, { "type": "course-of-action", "spec_version": "2.1", "id": "course-of-action--f66db0d5-a086-59e4-b95c-2946dc1ae340", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Pause-by-Default Emergency Pause", "description": "OAK OAK-M34 — class: architecture; audience: protocol, designer", "external_references": [ { "source_name": "oak", "external_id": "OAK-M34", "url": "https://onchainattack.org/#/mitigation/OAK-M34" } ] }, { "type": "course-of-action", "spec_version": "2.1", "id": "course-of-action--ebec25cb-37ca-5aa8-9b99-b8289275131d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Whitehat-Rescue Coordination", "description": "OAK OAK-M35 — class: operational; audience: protocol, designer, vendor", "external_references": [ { "source_name": "oak", "external_id": "OAK-M35", "url": "https://onchainattack.org/#/mitigation/OAK-M35" } ] }, { "type": "course-of-action", "spec_version": "2.1", "id": "course-of-action--9fbccd98-5d69-565c-ae1e-512ed8496492", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Proof-of-Reserves Cryptographic Auditing", "description": "OAK OAK-M36 — class: venue; audience: venue (CEX), risk-team, regulator", "external_references": [ { "source_name": "oak", "external_id": "OAK-M36", "url": "https://onchainattack.org/#/mitigation/OAK-M36" } ] }, { "type": "course-of-action", "spec_version": "2.1", "id": "course-of-action--c21ebe1c-c2c2-574c-b4e8-9a56c424c27c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "HSM and MPC Custody Architectures", "description": "OAK OAK-M37 — class: operational; audience: custody-customer, custody-vendor, protocol (treasury), risk-team", "external_references": [ { "source_name": "oak", "external_id": "OAK-M37", "url": "https://onchainattack.org/#/mitigation/OAK-M37" } ] }, { "type": "course-of-action", "spec_version": "2.1", "id": "course-of-action--d21d281b-32da-54da-aa63-dc2279c7ff5a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Time-Windowed Withdrawal Limits", "description": "OAK OAK-M38 — class: architecture; audience: protocol, designer, custody-vendor", "external_references": [ { "source_name": "oak", "external_id": "OAK-M38", "url": "https://onchainattack.org/#/mitigation/OAK-M38" } ] }, { "type": "course-of-action", "spec_version": "2.1", "id": "course-of-action--c392e9e5-92b6-5d9c-90f7-9a483f648389", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Cross-Protocol Watcher Network", "description": "OAK OAK-M39 — class: detection; audience: vendor, risk-team, protocol, designer", "external_references": [ { "source_name": "oak", "external_id": "OAK-M39", "url": "https://onchainattack.org/#/mitigation/OAK-M39" } ] }, { "type": "course-of-action", "spec_version": "2.1", "id": "course-of-action--1bab4ab0-e72b-5c94-aec8-d24c8d844d30", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Supply-Chain Package Integrity", "description": "OAK OAK-M40 — class: operational; audience: protocol (engineering staff), designer, custody-customer, custody-vendor, wallet", "external_references": [ { "source_name": "oak", "external_id": "OAK-M40", "url": "https://onchainattack.org/#/mitigation/OAK-M40" } ] }, { "type": "course-of-action", "spec_version": "2.1", "id": "course-of-action--58aa5034-3b68-5cbc-a5fa-995eb8b0e702", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Asset Freeze and Confiscate Coordination Workflow", "description": "OAK OAK-M41 — class: venue; audience: venue (CEX, OTC desk, stablecoin issuer, bridge protocol), regulator, law-enforcement agency, risk-team", "external_references": [ { "source_name": "oak", "external_id": "OAK-M41", "url": "https://onchainattack.org/#/mitigation/OAK-M41" } ] }, { "type": "course-of-action", "spec_version": "2.1", "id": "course-of-action--8134949d-9274-53e5-8503-2522685c7c5b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "SAR/STR Filing and Financial Intelligence Feedback Loop", "description": "OAK OAK-M42 — class: venue; audience: venue (CEX, OTC desk, custodian, stablecoin issuer), regulator, financial-intelligence unit (FIU), risk-team", "external_references": [ { "source_name": "oak", "external_id": "OAK-M42", "url": "https://onchainattack.org/#/mitigation/OAK-M42" } ] }, { "type": "course-of-action", "spec_version": "2.1", "id": "course-of-action--4350d990-7946-5df8-935c-c7a1a85409fb", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "KYT Operational Practice and Cross-VASP Coordination", "description": "OAK OAK-M43 — class: venue; audience: venue (CEX, OTC desk, custodian, bridge protocol), compliance-provider vendor, risk-team", "external_references": [ { "source_name": "oak", "external_id": "OAK-M43", "url": "https://onchainattack.org/#/mitigation/OAK-M43" } ] }, { "type": "course-of-action", "spec_version": "2.1", "id": "course-of-action--2a81b87b-335b-5e22-9976-4bc281356122", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Seed-Phrase Disclosure Refusal and Storage Isolation", "description": "OAK OAK-M44 — class: user-behavioural; audience: retail-user, custody-customer, wallet, vendor", "external_references": [ { "source_name": "oak", "external_id": "OAK-M44", "url": "https://onchainattack.org/#/mitigation/OAK-M44" } ] }, { "type": "course-of-action", "spec_version": "2.1", "id": "course-of-action--fd0e3140-61da-5d11-8062-b7fe0b9a6cb0", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Inbound-Contact Refusal and Out-of-Band Callback", "description": "OAK OAK-M45 — class: user-behavioural; audience: retail-user, custody-customer, venue, vendor", "external_references": [ { "source_name": "oak", "external_id": "OAK-M45", "url": "https://onchainattack.org/#/mitigation/OAK-M45" } ] }, { "type": "course-of-action", "spec_version": "2.1", "id": "course-of-action--951df08e-c5a9-548e-8191-1c0b5a944b53", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Small-Test-Withdrawal Invariant and Advance-Fee Refusal", "description": "OAK OAK-M46 — class: user-behavioural; audience: retail-user, custody-customer, venue, regulator", "external_references": [ { "source_name": "oak", "external_id": "OAK-M46", "url": "https://onchainattack.org/#/mitigation/OAK-M46" } ] }, { "type": "course-of-action", "spec_version": "2.1", "id": "course-of-action--25319b1c-1c78-5d59-b878-da5dbb98dd45", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "First-Party Acquisition and Self-Typed Navigation", "description": "OAK OAK-M47 — class: user-behavioural; audience: retail-user, custody-customer, wallet, vendor", "external_references": [ { "source_name": "oak", "external_id": "OAK-M47", "url": "https://onchainattack.org/#/mitigation/OAK-M47" } ] }, { "type": "course-of-action", "spec_version": "2.1", "id": "course-of-action--7f27f27f-c224-56e5-a2f5-dfdf156190c0", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Unsolicited-Code Quarantine and Pre-Execution Manifest Review", "description": "OAK OAK-M48 — class: operational; audience: developer, protocol, custody-vendor, trading-desk", "external_references": [ { "source_name": "oak", "external_id": "OAK-M48", "url": "https://onchainattack.org/#/mitigation/OAK-M48" } ] }, { "type": "tool", "spec_version": "2.1", "id": "tool--cd4a2105-1119-5bd7-a680-670d4d1d64ca", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Inferno Drainer", "aliases": [ "Inferno", "Inferno DaaS", "Discord-link drainer kit\" (per affiliate-channel framing in `[checkpoint2023drainers]`)." ], "external_references": [ { "source_name": "oak", "external_id": "OAK-S01", "url": "https://onchainattack.org/#/software/OAK-S01" } ], "tool_types": [ "exploitation" ] }, { "type": "tool", "spec_version": "2.1", "id": "tool--5ad45975-dab7-53e9-8619-66c8eb0cfc63", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Angel Drainer", "aliases": [ "Angel", "Angel DaaS", "Angel-X\" (occasional rebranding suffix observed in industry forensic posts)." ], "external_references": [ { "source_name": "oak", "external_id": "OAK-S02", "url": "https://onchainattack.org/#/software/OAK-S02" } ], "tool_types": [ "exploitation" ] }, { "type": "tool", "spec_version": "2.1", "id": "tool--bfde2831-5467-5e6f-a6d1-e4122d97842f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Pink Drainer", "aliases": [ "Pink", "Pinkdrainer", "Pink-X\" (occasional industry shorthand for the operator-of-record team behind the kit)." ], "external_references": [ { "source_name": "oak", "external_id": "OAK-S03", "url": "https://onchainattack.org/#/software/OAK-S03" } ], "tool_types": [ "exploitation" ] }, { "type": "tool", "spec_version": "2.1", "id": "tool--176e9349-f531-5570-93a1-c4a8a41d3fa2", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Monkey Drainer", "aliases": [ "Monkey", "Monkey-Drainer.eth\" (one of the historically-associated naming patterns in industry forensic posts)." ], "external_references": [ { "source_name": "oak", "external_id": "OAK-S04", "url": "https://onchainattack.org/#/software/OAK-S04" } ], "tool_types": [ "exploitation" ] }, { "type": "tool", "spec_version": "2.1", "id": "tool--f0ed502b-402f-582b-a752-d72b34f83045", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Venom Drainer", "aliases": [ "Venom", "Venom DaaS." ], "external_references": [ { "source_name": "oak", "external_id": "OAK-S05", "url": "https://onchainattack.org/#/software/OAK-S05" } ], "tool_types": [ "exploitation" ] }, { "type": "tool", "spec_version": "2.1", "id": "tool--f62e5cdf-a9b6-5937-8013-f22b7360d132", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Vanilla Drainer", "aliases": [ "Vanilla", "Vanilla DaaS." ], "external_references": [ { "source_name": "oak", "external_id": "OAK-S06", "url": "https://onchainattack.org/#/software/OAK-S06" } ], "tool_types": [ "exploitation" ] }, { "type": "tool", "spec_version": "2.1", "id": "tool--e62b06af-edeb-58b0-9b4b-90c1c8e7f228", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Chick Drainer", "aliases": [ "Chick", "Chick DaaS." ], "external_references": [ { "source_name": "oak", "external_id": "OAK-S07", "url": "https://onchainattack.org/#/software/OAK-S07" } ], "tool_types": [ "exploitation" ] }, { "type": "malware", "spec_version": "2.1", "id": "malware--a55da009-7480-5a50-8a91-347e90ba7b22", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "TraderTraitor", "is_family": true, "aliases": [ "ManuscryptCrypto\" sub-family overlaps as documented by Kaspersky and Mandiant", "and \"Hidden Risk\" / \"RustBucket\" successors tracked separately by SentinelOne and Jamf for macOS evolution." ], "x_oak_platforms": [ "cross-platform (macOS-focused — both Intel and Apple Silicon builds documented; Windows builds also distributed via the same lure infrastructure; Linux builds reported in narrower vendor-corroborated cases)." ], "external_references": [ { "source_name": "oak", "external_id": "OAK-S08", "url": "https://onchainattack.org/#/software/OAK-S08" } ], "malware_types": [ "backdoor", "rat" ] }, { "type": "malware", "spec_version": "2.1", "id": "malware--ca7b9c46-bcf0-5e1a-9c03-2021303539c3", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "AppleJeus", "is_family": true, "aliases": [ "COPPERHEDGE" ], "x_oak_platforms": [ "cross-platform (macOS-focused with foundational role in establishing the macOS-targeting DPRK tradecraft; Windows builds distributed in parallel through 2018–2021)." ], "external_references": [ { "source_name": "oak", "external_id": "OAK-S09", "url": "https://onchainattack.org/#/software/OAK-S09" } ], "malware_types": [ "backdoor", "rat" ] }, { "type": "malware", "spec_version": "2.1", "id": "malware--c9e659a2-639a-5077-8263-533686709bf6", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Manuscrypt", "is_family": true, "x_oak_platforms": [ "Windows (long-running Windows-only family; macOS and Linux-side DPRK tooling sits in the AppleJeus / RustBucket / KandyKorn lineage rather than the Manuscrypt lineage)." ], "external_references": [ { "source_name": "oak", "external_id": "OAK-S10", "url": "https://onchainattack.org/#/software/OAK-S10" } ], "malware_types": [ "backdoor", "rat" ] }, { "type": "malware", "spec_version": "2.1", "id": "malware--5d7a6f91-5b20-5011-9891-34fd5cdaca79", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "3CX VoIP Client Trojan", "is_family": true, "x_oak_platforms": [ "cross-platform (Windows and macOS — both `3CXDesktopApp.exe` and `3CXDesktopApp` Mach-O binaries were trojanized in the supply-chain compromise; Linux 3CX builds were not affected per public reporting)." ], "external_references": [ { "source_name": "oak", "external_id": "OAK-S11", "url": "https://onchainattack.org/#/software/OAK-S11" } ], "malware_types": [ "backdoor", "rat" ] }, { "type": "malware", "spec_version": "2.1", "id": "malware--b9301c01-f47a-515e-a5d7-238549fc8f43", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "JADESNOW", "is_family": true, "aliases": [ "BABYSHARK (PowerShell-based reconnaissance / staging family also documented in Kimsuky activity by multiple vendors)" ], "x_oak_platforms": [ "Windows (the dominant deployment target for JADESNOW within the APT43 / Kimsuky operational profile, consistent with the cluster's spear-phishing-into-Windows-victim-environment tradecraft against policy researchers, journalists, and government targets)." ], "external_references": [ { "source_name": "oak", "external_id": "OAK-S12", "url": "https://onchainattack.org/#/software/OAK-S12" } ], "malware_types": [ "backdoor", "rat" ] }, { "type": "malware", "spec_version": "2.1", "id": "malware--d31a01a0-a0eb-5609-a13c-4c16a6996946", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "RedLine Stealer", "is_family": true, "aliases": [ "RedLine", "RedLine Infostealer" ], "x_oak_platforms": [ "Windows (primary); cross-platform browser-data targets (Chromium-family, Gecko-family)" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-S13", "url": "https://onchainattack.org/#/software/OAK-S13" } ], "malware_types": [ "spyware", "credential-exploitation" ] }, { "type": "malware", "spec_version": "2.1", "id": "malware--9255da7a-0f5e-5915-bc28-6465bc7db74d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Lumma Stealer", "is_family": true, "aliases": [ "LummaC2", "Lumma", "Lumma C2 Stealer" ], "x_oak_platforms": [ "Windows (primary)" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-S14", "url": "https://onchainattack.org/#/software/OAK-S14" } ], "malware_types": [ "spyware", "credential-exploitation" ] }, { "type": "malware", "spec_version": "2.1", "id": "malware--a55bbadd-c3e6-52ca-9aee-b91532c61a9a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "AsyncRAT", "is_family": true, "aliases": [ "Async RAT", "AsyncRAT C#" ], "x_oak_platforms": [ "Windows (primary; .NET Framework / .NET Core targets)" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-S15", "url": "https://onchainattack.org/#/software/OAK-S15" } ], "malware_types": [ "backdoor", "rat" ] }, { "type": "tool", "spec_version": "2.1", "id": "tool--7ff1da9c-a18d-5686-889d-9b654b898cbb", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Profanity", "aliases": [ "Profanity (johguse/profanity)" ], "x_oak_platforms": [ "Linux / Windows / macOS (GPU-accelerated, OpenCL)" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-S16", "url": "https://onchainattack.org/#/software/OAK-S16" } ], "tool_types": [ "exploitation" ] }, { "type": "tool", "spec_version": "2.1", "id": "tool--88f19f07-d87d-5350-ae41-ce479cbfc7ee", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "jaredfromsubway.eth", "aliases": [ "Jared", "jaredfromsubway", "Jared 2.0\" (2024 iteration tracked by EigenPhi)" ], "x_oak_platforms": [ "Ethereum mainnet (sandwich-MEV operation); off-chain searcher infrastructure not publicly characterised" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-S17", "url": "https://onchainattack.org/#/software/OAK-S17" } ], "tool_types": [ "exploitation" ] }, { "type": "tool", "spec_version": "2.1", "id": "tool--ded60c66-92eb-5c74-a21c-326e63e6cff0", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Pump.fun-style Bundlers", "aliases": [ "Pump.fun bundlers", "launch bundlers", "dev-snipe bundlers", "Jito bundlers (in this context)" ], "x_oak_platforms": [ "Solana (primary); equivalent classes have emerged on other chains' token-launch venues" ], "external_references": [ { "source_name": "oak", "external_id": "OAK-S18", "url": "https://onchainattack.org/#/software/OAK-S18" } ], "tool_types": [ "exploitation" ] }, { "type": "malware", "spec_version": "2.1", "id": "malware--19d87156-8f94-5a72-b336-889f9d28e34e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "KandyKorn", "is_family": true, "aliases": [ "so the same observed activity may be reported as \"KandyKorn detected\" or as \"Citrine Sleet macOS staging\" depending on the reporting vendor." ], "x_oak_platforms": [ "macOS (Intel and Apple Silicon — Elastic's original reporting documented Mach-O builds for both architectures within the same campaign infrastructure, consistent with the broader DPRK macOS lineage's shift to universal-binary distribution from 2022 onward)." ], "external_references": [ { "source_name": "oak", "external_id": "OAK-S19", "url": "https://onchainattack.org/#/software/OAK-S19" } ], "malware_types": [ "backdoor", "rat" ] }, { "type": "malware", "spec_version": "2.1", "id": "malware--a8c40011-d841-509c-b02b-424191105390", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "RustBucket", "is_family": true, "aliases": [ "but Jamf's original RustBucket naming remains the canonical industry label for the Rust-language second-stage loader specifically." ], "x_oak_platforms": [ "macOS (Intel-first, with Apple Silicon variants documented in subsequent Jamf and SentinelOne reporting through 2023–2024 consistent with the broader DPRK macOS lineage's shift to universal-binary distribution)." ], "external_references": [ { "source_name": "oak", "external_id": "OAK-S20", "url": "https://onchainattack.org/#/software/OAK-S20" } ], "malware_types": [ "backdoor", "rat" ] }, { "type": "malware", "spec_version": "2.1", "id": "malware--b7215b7c-47a0-5f14-aaff-f22040ea76fb", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "SwiftLoader", "is_family": true, "aliases": [ "ObjCShellz (OAK-S22)", "and the Hidden Risk campaign cohort within the broader BlueNoroff and Lazarus macOS lineages" ], "x_oak_platforms": [ "macOS (Intel and Apple Silicon — universal-binary distribution consistent with the broader DPRK macOS lineage's 2022-onward shift to universal builds)." ], "external_references": [ { "source_name": "oak", "external_id": "OAK-S21", "url": "https://onchainattack.org/#/software/OAK-S21" } ], "malware_types": [ "backdoor", "rat" ] }, { "type": "malware", "spec_version": "2.1", "id": "malware--71df2d91-411a-5d72-a9fb-c8715c02aa17", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "ObjCShellz", "is_family": true, "aliases": [ "SwiftLoader (OAK-S21)", "but SentinelOne's original naming remains the canonical industry label for the Objective-C-language reverse-shell specifically." ], "x_oak_platforms": [ "macOS (Intel and Apple Silicon — universal-binary distribution consistent with the broader DPRK macOS lineage's 2022-onward shift to universal builds)." ], "external_references": [ { "source_name": "oak", "external_id": "OAK-S22", "url": "https://onchainattack.org/#/software/OAK-S22" } ], "malware_types": [ "backdoor", "rat" ] }, { "type": "malware", "spec_version": "2.1", "id": "malware--13bed137-d65c-53c2-bf4f-048aadb26ca6", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "LockBit ransomware", "is_family": true, "x_oak_platforms": [ "Windows (primary, all major versions); Linux (LockBit 2.0 onward, with dedicated Linux/ESXi targeting in LockBit 3.0); VMware ESXi (the dedicated ESXi-hypervisor variant from 2021 onward is one of the family's defining technical features and shaped the ESXi-targeting trend across the broader RaaS sector); cross-platform aspirations in the unreleased LockBit-NG-Dev Rust rewrite (which mirrored the BlackCat / ALPHV cross-platform-Rust design choice)." ], "external_references": [ { "source_name": "oak", "external_id": "OAK-S23", "url": "https://onchainattack.org/#/software/OAK-S23" } ], "malware_types": [ "ransomware" ] }, { "type": "malware", "spec_version": "2.1", "id": "malware--66d281d4-5e2f-5707-afe5-568e6b167a82", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "BlackCat / ALPHV ransomware", "is_family": true, "x_oak_platforms": [ "Windows (primary, with Windows-server enterprise targeting the dominant deployment surface); Linux (parity build released alongside Windows); VMware ESXi (a dedicated hypervisor variant, mirroring the LockBit-3.0-era sector pivot to ESXi-targeting); the Rust-language implementation produces structurally identical builds across these platforms", "which is the family's defining technical innovation and the principal reason for ALPHV's 2022–2023 affiliate-attractiveness." ], "external_references": [ { "source_name": "oak", "external_id": "OAK-S24", "url": "https://onchainattack.org/#/software/OAK-S24" } ], "malware_types": [ "ransomware" ] }, { "type": "malware", "spec_version": "2.1", "id": "malware--b99afedd-61bf-5be2-a839-e93147ea2e38", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Maui ransomware", "is_family": true, "x_oak_platforms": [ "Windows (the only platform observed in public reporting; CISA AA22-187A and the subsequent Mandiant / Microsoft / Stairwell technical analyses describe a Windows-only x86 implementation)." ], "external_references": [ { "source_name": "oak", "external_id": "OAK-S25", "url": "https://onchainattack.org/#/software/OAK-S25" } ], "malware_types": [ "ransomware" ] }, { "type": "malware", "spec_version": "2.1", "id": "malware--2e94d85c-173f-5591-a8bf-deacf922e499", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Conti ransomware", "is_family": true, "x_oak_platforms": [ "Windows (primary, all variants); Linux (a Conti-Linux variant emerged in late 2021 with VMware ESXi targeting, mirroring the broader RaaS-sector ESXi pivot; partial code reuse of the Conti-Linux variant is documented in Hive's Linux build per Mandiant); the Conti v3 Windows codebase was leaked in full during the ContiLeaks dump and has since been forked / rebadged by multiple unrelated groups (LockBit Green is the highest-profile rebadge — see OAK-S23 — but unaffiliated commodity-tier Conti-fork builds also circulate)." ], "external_references": [ { "source_name": "oak", "external_id": "OAK-S26", "url": "https://onchainattack.org/#/software/OAK-S26" } ], "malware_types": [ "ransomware" ] }, { "type": "malware", "spec_version": "2.1", "id": "malware--01cc12b6-a3e9-50b2-984d-7cb990052ace", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Black Basta ransomware", "is_family": true, "aliases": [ "Storm-1811 (Microsoft Threat Intelligence naming, partially overlapping the broader Conti-successor-cohort surface)" ], "x_oak_platforms": [ "Windows (primary, all enterprise-server variants); Linux / VMware ESXi (a dedicated ESXi-hypervisor variant emerged June 2022, mirroring the broader RaaS-sector pivot to hypervisor-targeted attacks established by LockBit and ALPHV). The Windows codebase is C++-authored with structural-and-stylistic similarities to Conti v3 documented by Trend Micro", "Sophos", "and Mandiant; the lineage is read as *Conti-codebase-derivative-with-rewrites* rather than a clean fork." ], "external_references": [ { "source_name": "oak", "external_id": "OAK-S27", "url": "https://onchainattack.org/#/software/OAK-S27" } ], "malware_types": [ "ransomware" ] }, { "type": "malware", "spec_version": "2.1", "id": "malware--6f6ba66d-784c-5c94-a458-e7d8e6c7fa2a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Royal / BlackSuit ransomware", "is_family": true, "aliases": [ "the informal \"Royal/BlackSuit\" conjoined naming used in CISA AA23-061A and the November 2023 / August 2024 update advisories", "Microsoft", "leak-site infrastructure", "and operator-cohort were continuous across the rebrand at the wallet-cluster and tradecraft-fingerprint levels." ], "x_oak_platforms": [ "Windows (primary, all enterprise-server variants); Linux / VMware ESXi (a dedicated ESXi-hypervisor variant emerged in early 2023, mirroring the broader RaaS-sector pivot to hypervisor-targeted attacks). The Windows codebase's lineage to Conti's Zeon variant is the cleanest documented case of *direct Conti-codebase fork as a successor-brand encryptor* — Royal forked from Zeon rather than being a clean rewrite", "distinguishing it from the Black Basta lineage where the Conti v3 codebase was substantively rewritten before redeployment." ], "external_references": [ { "source_name": "oak", "external_id": "OAK-S28", "url": "https://onchainattack.org/#/software/OAK-S28" } ], "malware_types": [ "ransomware" ] }, { "type": "malware", "spec_version": "2.1", "id": "malware--936e8372-3daa-54da-a89a-4f68f1b71a1f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "BeaverTail", "is_family": true, "x_oak_platforms": [ "cross-platform (Windows, macOS, Linux — the JavaScript implementation runs natively in the Node.js runtime that the npm-package delivery surface presupposes; this cross-platform property is itself a defining family-architectural feature, distinguishing BeaverTail from the platform-specific macOS-focused TraderTraitor / RustBucket / KandyKorn / SwiftLoader / ObjCShellz lineage at OAK-S08 / S20 / S21 / S22)." ], "external_references": [ { "source_name": "oak", "external_id": "OAK-S29", "url": "https://onchainattack.org/#/software/OAK-S29" } ], "malware_types": [ "backdoor", "rat" ] }, { "type": "malware", "spec_version": "2.1", "id": "malware--60e49e2e-1db3-599d-a4e8-1c4d9e72107b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "InvisibleFerret", "is_family": true, "x_oak_platforms": [ "cross-platform (Windows, macOS, Linux — the Python implementation runs natively in any Python-3 runtime that the BeaverTail first-stage establishes; cross-platform property mirrors BeaverTail and distinguishes the family from the platform-specific macOS-focused TraderTraitor lineage at OAK-S08)." ], "external_references": [ { "source_name": "oak", "external_id": "OAK-S30", "url": "https://onchainattack.org/#/software/OAK-S30" } ], "malware_types": [ "backdoor", "rat" ] }, { "type": "malware", "spec_version": "2.1", "id": "malware--e92e8137-b390-5c7a-b1a5-f2491b4059c4", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "TigerRAT", "is_family": true, "aliases": [ "Onyx Sleet / Plutonium (Microsoft Threat Intelligence's continuous Andariel-cluster naming)", "Stonefly (Symantec / Broadcom)", "DarkSeoul-cohort historical naming for the broader DPRK destructive-and-espionage cluster from which Andariel is the contemporary financially-motivated sub-cluster", "and the external Group ID G0138 Andariel Group profile under which TigerRAT activity is documented." ], "x_oak_platforms": [ "Windows (the only platform observed in public reporting; KrCERT/CC, AhnLab, and Mandiant analyses describe a Windows-only x86 implementation; no macOS or Linux variants documented as of v0.1)." ], "external_references": [ { "source_name": "oak", "external_id": "OAK-S31", "url": "https://onchainattack.org/#/software/OAK-S31" } ], "malware_types": [ "backdoor", "rat" ] }, { "type": "malware", "spec_version": "2.1", "id": "malware--51690d05-7fe1-5041-9cd4-4ddc600d0ff1", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "AppleSeed", "is_family": true, "aliases": [ "Thallium (Microsoft Threat Intelligence's earlier Kimsuky naming)", "Black Banshee (CrowdStrike's Kimsuky-cluster naming)", "Velvet Chollima and the broader Chollima-family naming", "APT43 (Mandiant's March 2023 cluster-naming consolidation)", "TA406 (Proofpoint's Kimsuky naming)", "and the external Group ID G0094 Kimsuky Group profile under which AppleSeed activity is documented." ], "x_oak_platforms": [ "Windows (the only platform observed in public reporting; Talos, ESET, Mandiant, AhnLab, and KISA analyses describe a Windows-only x86 implementation; no macOS or Linux variants documented as of v0.1, consistent with the family's HWP-document-borne delivery surface that presupposes a Korean-language Windows-host target population)." ], "external_references": [ { "source_name": "oak", "external_id": "OAK-S32", "url": "https://onchainattack.org/#/software/OAK-S32" } ], "malware_types": [ "backdoor", "rat" ] }, { "type": "malware", "spec_version": "2.1", "id": "malware--90dd3e78-eaae-59ab-ad4f-2ab48eb520a0", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Akira ransomware", "is_family": true, "aliases": [ "Sophos" ], "x_oak_platforms": [ "Windows (primary, all enterprise-server variants, C++-authored codebase with partial structural similarities to Conti v3 documented by Sophos and Avast); Linux / VMware ESXi (a Rust-language variant emerged April–May 2023 under the temporary \"Megazord\" naming before consolidation back to the Akira brand). The dual-language architecture — C++ Windows + Rust ESXi/Linux — mirrors the ALPHV-influenced sector-wide pattern of Rust-for-cross-platform-hypervisor-variants while retaining C++ for the Windows codebase", "a hybrid pattern that became more common across 2023–2024 RaaS emergences." ], "external_references": [ { "source_name": "oak", "external_id": "OAK-S33", "url": "https://onchainattack.org/#/software/OAK-S33" } ], "malware_types": [ "ransomware" ] }, { "type": "malware", "spec_version": "2.1", "id": "malware--583c2311-1a94-56ff-ac8f-67ac88d6cbcc", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "RansomHub ransomware", "is_family": true, "aliases": [ "with the \"Notchy\" affiliate behind the Change Healthcare attack widely-reported as having rotated onto the RansomHub affiliate panel." ], "x_oak_platforms": [ "Windows (primary, all enterprise-server variants, with the encryptor codebase showing partial structural similarities to the prior Knight / Cyclops-class codebase per Mandiant and Microsoft attribution work); Linux / VMware ESXi (a dedicated ESXi-hypervisor variant emerged in mid-2024); Go-language and Rust-language partial implementations have been documented in different RansomHub builds across 2024", "with the dual-language architecture mirroring the broader sector pattern of hybrid-codebase RaaS designs established by Akira (OAK-S33) and the LockBit NG-Dev rewrite." ], "external_references": [ { "source_name": "oak", "external_id": "OAK-S34", "url": "https://onchainattack.org/#/software/OAK-S34" } ], "malware_types": [ "ransomware" ] }, { "type": "malware", "spec_version": "2.1", "id": "malware--1a29e7c0-ecea-5f4c-bd2f-28956dda3417", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "BlackByte ransomware", "is_family": true, "aliases": [ "and the BlackByte 2.0 / NT / 3.0 version-string naming used to disambiguate the multi-language codebase rotations across .NET (2021–2022)", "Go (2022–2023)" ], "x_oak_platforms": [ "Windows (primary, all enterprise-server variants, with the codebase rotated across .NET (2021–2022) → Go (2022–2023) → C++ (2023–2025) per Trustwave, Microsoft, and Sophos attribution work); Linux / VMware ESXi (a dedicated ESXi-hypervisor variant emerged in 2022, mirroring the broader RaaS-sector pivot to hypervisor-targeted attacks established by LockBit and ALPHV). The multi-language codebase rotation is the family's defining technical history and provides a useful comparative reference for understanding the *operator-side codebase-modernisation cadence* across a long-lifetime mid-tier RaaS brand — distinct from both single-language persistence (Conti's C++-only history) and single-rewrite rotation (LockBit's NG-Dev Rust rewrite recovered pre-deployment)." ], "external_references": [ { "source_name": "oak", "external_id": "OAK-S35", "url": "https://onchainattack.org/#/software/OAK-S35" } ], "malware_types": [ "ransomware" ] }, { "type": "tool", "spec_version": "2.1", "id": "tool--f16b05e5-f10e-5b54-88bb-65e6f08b5cd2", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Karakurt extortion-only kit", "aliases": [ "Karakurt extortion kit; Karakurt Lair (operator leak-site branding); part of the Conti-spinoff cohort tracked by Mandiant and CrowdStrike under the Wizard Spider successor-brand umbrella." ], "x_oak_platforms": [ "Cross-platform-by-tool-stack — Karakurt does not develop or deploy a custom encryptor and is not", "in the strict sense", "a \"ransomware family.\" Its operating tooling is a curated configuration of commodity post-exploitation and exfiltration utilities: Cobalt Strike (OAK-S37)", "Mimikatz", "AnyDesk", "rclone (the dominant Karakurt-fingerprint exfiltration utility)", "Filezilla / WinSCP", "Mega.io's MEGAsync", "and a custom set of automated victim-data-publication scripts running against the Karakurt Lair leak site." ], "external_references": [ { "source_name": "oak", "external_id": "OAK-S36", "url": "https://onchainattack.org/#/software/OAK-S36" } ], "tool_types": [ "exploitation" ] }, { "type": "tool", "spec_version": "2.1", "id": "tool--a2e9134d-5c15-5c22-b6f2-44bfba03b872", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Cobalt Strike", "x_oak_platforms": [ "Windows (primary, all variants); cross-platform Beacon variants (Linux, macOS) exist in legitimate licensed deployments and have been observed in some cracked-criminal deployments through 2024." ], "external_references": [ { "source_name": "oak", "external_id": "OAK-S37", "url": "https://onchainattack.org/#/software/OAK-S37" } ], "tool_types": [ "exploitation" ] }, { "type": "malware", "spec_version": "2.1", "id": "malware--ebc08a60-abd0-5dea-a30c-27f7ec340051", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "IcedID + Pikabot loaders", "is_family": true, "aliases": [ "IcedID — also tracked as BokBot (CrowdStrike) and as TA551-and-derivatives (Proofpoint historical naming for some delivery cohorts). Pikabot — successor-and-overlap loader to Qakbot (OAK-S40)", "tracked by Trend Micro", "Elastic", "and Zscaler from early 2023. The two are combined into a single OAK-S entry because they share the Russian-cybercrime-ecosystem operator substrate", "the initial-access-broker operating role", "and the May 2024 Operation Endgame disruption-event scope." ], "x_oak_platforms": [ "Windows (primary, all variants)." ], "external_references": [ { "source_name": "oak", "external_id": "OAK-S38", "url": "https://onchainattack.org/#/software/OAK-S38" } ], "malware_types": [ "backdoor", "rat" ] }, { "type": "malware", "spec_version": "2.1", "id": "malware--107e102f-d531-58ef-9f01-aa602de42211", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "DanaBot", "is_family": true, "x_oak_platforms": [ "Windows (primary, all variants)." ], "external_references": [ { "source_name": "oak", "external_id": "OAK-S39", "url": "https://onchainattack.org/#/software/OAK-S39" } ], "malware_types": [ "backdoor", "rat" ] }, { "type": "malware", "spec_version": "2.1", "id": "malware--ceea4ce9-71aa-52df-899b-27715d98c7d9", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Qakbot / Pinkslipbot / QBot", "is_family": true, "x_oak_platforms": [ "Windows (primary, all variants)." ], "external_references": [ { "source_name": "oak", "external_id": "OAK-S40", "url": "https://onchainattack.org/#/software/OAK-S40" } ], "malware_types": [ "backdoor", "rat" ] }, { "type": "malware", "spec_version": "2.1", "id": "malware--c469fc57-9c29-59ba-bcd1-d832071309c6", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "RemotePE", "is_family": true, "aliases": [ "RemotePE (canonical Fox-IT / NCC Group naming, September 2025); DPAPILoader / RemotePELoader (the two preceding loader stages in the three-stage chain, sometimes reported as part of the same family)." ], "x_oak_platforms": [ "Windows (the only platform observed in public reporting; Fox-IT analysis describes a Windows-only implementation; DPAPI environmental keying is a Windows-native mechanism; no macOS or Linux variants documented as of v0.1)." ], "external_references": [ { "source_name": "oak", "external_id": "OAK-S41", "url": "https://onchainattack.org/#/software/OAK-S41" } ], "malware_types": [ "backdoor", "rat" ] }, { "type": "intrusion-set", "spec_version": "2.1", "id": "intrusion-set--59707bbb-48c5-5afb-8aaf-6233fb654e93", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Lazarus Group / DPRK-attributed crypto theft", "description": "OAK OAK-G01 — attribution status: **confirmed** by FBI public statements, U.S. Treasury OFAC designations, U.S. Department of Justice indictments, and multiple national CERT bodies (KISA, NCSC, BSI). Attribution to the Reconnaissance General Bureau of the DPRK is the standing public position of the U.S. government.", "external_references": [ { "source_name": "oak", "external_id": "OAK-G01", "url": "https://onchainattack.org/#/group/OAK-G01" } ] }, { "type": "intrusion-set", "spec_version": "2.1", "id": "intrusion-set--9f9bbd23-75c8-5685-9224-6d053ccba386", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Drainer-as-a-Service operators", "description": "OAK OAK-G02 — attribution status: **inferred-strong** at the service-family level (industry forensic providers with consistent published attributions). Per-incident operator-of-record attribution within a service family is generally **inferred-weak** and is not published per-incident at v0.1.", "external_references": [ { "source_name": "oak", "external_id": "OAK-G02", "url": "https://onchainattack.org/#/group/OAK-G02" } ] }, { "type": "intrusion-set", "spec_version": "2.1", "id": "intrusion-set--3f5d75bc-c34c-5d4a-af7f-80df1166d48c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Russian-attributed crypto-laundering infrastructure cluster (Garantex / Grinex / A7A5 lineage)", "description": "OAK OAK-G03 — attribution status: **confirmed** at the *infrastructure-and-named-operator* level for the Garantex sub-cluster — U.S. Treasury OFAC SDN designation April 5, 2022 (`[ofac2022garantex]`); DOJ Eastern District of Virginia indictment unsealed February 27, 2025 against named administrators Aleksej Besciokov and Aleksandr Mira Serda (`[doj2025garantex]`); coordinated U.S. Secret Service / German BKA / Finnish NBI takedown action March 6, 2025; second OFAC designation round August 14, 2025 against Grinex and the A7A5 token network (`[treasury2025garantexnetwork]`). Attribution that the Garantex cluster *received and processed proceeds* from specific upstream criminal categories — Conti ransomware (\\~\\$6M direct inflow), Hydra darknet market (\\~\\$2.6M direct inflow), and a longer tail of ransomware-affiliate flows — is **inferred-strong** from industry forensic providers (Chainalysis, Elliptic, TRM Labs) cited in the Treasury press releases.", "external_references": [ { "source_name": "oak", "external_id": "OAK-G03", "url": "https://onchainattack.org/#/group/OAK-G03" } ] }, { "type": "intrusion-set", "spec_version": "2.1", "id": "intrusion-set--603fffec-d3ba-5f13-be62-476303b69361", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "DPRK IT-Worker Placement Scheme", "description": "OAK OAK-G04 — attribution status: **confirmed** at the *scheme-and-named-facilitator* level — joint U.S. State / Treasury / FBI advisory dated May 16, 2022 (`[fbidprkitworker2022]`); OFAC SDN designations of Chinyong IT Cooperation Company and Kim Sang Man on May 23, 2023 (`[treasurydprkitworker2023]`); multiple DOJ indictments and convictions, including the Christina Marie Chapman \"laptop farm\" prosecution (guilty plea February 2024; sentenced 102 months / July 2025) (`[dojchapmanindictment2024]`) and the Jin Sung-Il / Pak Jin-Song et al. five-defendant indictment (Southern District of Florida, January 2025); March 2026 OFAC round designating six individuals and two entities for IT-worker fraud (`[ofac2026dprkitworker]`). Attribution that *specific crypto-firm exploits* are downstream of an OAK-G04 placement (Munchables March 2024; Solareum and other industry-reported cases) is **inferred-strong** from forensic providers (Chainalysis, TRM Labs, ZachXBT) where the on-chain signature, hire-then-exploit timeline, and identity-overlap evidence are jointly documented.", "external_references": [ { "source_name": "oak", "external_id": "OAK-G04", "url": "https://onchainattack.org/#/group/OAK-G04" } ] }, { "type": "intrusion-set", "spec_version": "2.1", "id": "intrusion-set--50ffc35a-f390-56a1-b93c-4af2c94e2889", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "LockBit Ransomware-as-a-Service operation", "description": "OAK OAK-G05 — attribution status: **confirmed** at the *operator-and-named-affiliate* level — coordinated U.K. National Crime Agency / U.S. FBI / Europol \"Operation Cronos\" disruption announced February 20, 2024 (`[nca2024operationcronos]`); U.S. Treasury OFAC SDN designations of Russian nationals Artur Sungatov and Ivan Kondratyev with ten cryptocurrency addresses listed as SDN identifiers, February 20, 2024 (`[ofac2024lockbitaffiliates]`); U.S. Department of Justice 26-count indictment unsealed May 7, 2024 against Dmitry Yuryevich Khoroshev as the LockBit developer-and-administrator, accompanied by OFAC SDN designation of Khoroshev personally and a U.S. Department of State \\$10M reward (`[doj2024khoroshev]`, `[ofac2024khoroshev]`); coordinated U.K. FCDO and Australia DFAT designations the same day; subsequent OFAC action against the Russian web-hosting provider Aeza Group for hosting LockBit infrastructure (`[ofac2025aeza]`). Attribution that *specific ransom-payment flows* trace through specific downstream laundering infrastructure (Garantex / OAK-G03, Sinbad mixer, Bitzlato) is **inferred-strong** from industry forensic providers (Chainalysis, TRM Labs) and the U.K. NCA's \"Behind the Screens\" wallet-tracing publication.", "external_references": [ { "source_name": "oak", "external_id": "OAK-G05", "url": "https://onchainattack.org/#/group/OAK-G05" } ] }, { "type": "intrusion-set", "spec_version": "2.1", "id": "intrusion-set--25519556-9d97-5dbe-9bd2-3ed7e815c7c6", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Evil Corp", "description": "OAK OAK-G06 — attribution status: **confirmed** at the *operator-and-named-defendant* level — U.S. Treasury OFAC SDN designation of Evil Corp as an entity together with seventeen named individuals on December 5, 2019, pursuant to E.O. 13694 / E.O. 13757 (`[ofac2019evilcorp]`); same-day U.S. Department of Justice unsealed indictments in the Western District of Pennsylvania and the District of Nebraska charging Yakubets and Turashev with conspiracy, computer hacking, wire fraud, and bank fraud (`[doj2019yakubets]`); U.S. Department of State \\$5M reward for information leading to the arrest of Yakubets (the largest such reward for a cybercriminal at the time of issuance); coordinated trilateral sanctions architecture announced October 1, 2024 with U.S. Treasury OFAC, U.K. Foreign, Commonwealth and Development Office (FCDO) via the National Crime Agency, and Australia Department of Foreign Affairs and Trade (DFAT) jointly designating sixteen Evil Corp members and associates including Viktor Yakubets and Eduard Benderskiy as the FSB-link node (`[ofac2024evilcorp]`, `[nca2024evilcorp]`); same-day U.S. DOJ unsealed seven-count indictment of Aleksandr Ryzhenkov in the Northern District of Texas explicitly naming the BitPaymer-and-LockBit-affiliate dual-track activity (`[doj2024ryzhenkov]`); explicit Treasury and NCA findings that Yakubets has provided material assistance to the Russian Federal Security Service (FSB) — the FSB-link finding was the December 2019 designation's stated rationale and was reinforced in the October 2024 designation through the Benderskiy nexus. Attribution that *specific ransom-payment flows* trace through specific downstream laundering venues (Garantex / OAK-G03, mixers, non-KYC exchanges) is **inferred-strong** from industry forensic providers (Chainalysis, TRM Labs) and from the U.K. NCA's October 2024 \"Behind the Screens\" publication (`[chainalysisevilcorp2024]`, `[trmevilcorp2024]`).", "external_references": [ { "source_name": "oak", "external_id": "OAK-G06", "url": "https://onchainattack.org/#/group/OAK-G06" } ] }, { "type": "intrusion-set", "spec_version": "2.1", "id": "intrusion-set--533fc757-0230-574b-99b5-4e0d54367824", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "APT43 / Kimsuky (DPRK espionage-and-self-funding cluster)", "description": "OAK OAK-G07 — attribution status: **confirmed** at the *cluster-and-state-attribution* level — U.S. Department of the Treasury OFAC SDN designation of Kimsuky on November 30, 2023 (`[ofac2023kimsuky]`, Treasury press release JY1938) carried out in coordination with Australia, Japan, and the Republic of Korea, attributing the cluster to the DPRK Reconnaissance General Bureau (RGB) and citing intelligence-gathering in support of the DPRK's strategic objectives following the November 1, 2023 reconnaissance-satellite launch; Republic of Korea sanctions designation of Kimsuky by the Ministry of Foreign Affairs / NIS, June 2, 2023 (`[mofakimsuky2023]`), the first time South Korea sanctioned a North Korean hacking group; joint cyber-security advisory of March 20, 2023 issued by the German Bundesamt für Verfassungsschutz (BfV) and the Republic of Korea National Intelligence Service (NIS) characterising Kimsuky's tooling and TTPs (`[bfvnis2023kimsuky]`); Mandiant APT43 report of March 28, 2023 attributing the cluster to the RGB at *moderate confidence* and documenting the cryptocurrency-funded operational model in technical detail (`[mandiantapt432023]`); external Group ID G0094 with sustained multi-vendor corroboration (CrowdStrike, Microsoft, Proofpoint, Google TAG, Recorded Future, Kaspersky). Attribution that *specific cryptocurrency-theft incidents* are downstream of an OAK-G07 placement (rather than an OAK-G01 placement) is **inferred-strong** in most cases — the cluster boundary between G01 (BlueNoroff / APT38 financial-theft sub-cluster) and G07 (APT43 / Kimsuky espionage-and-self-funding sub-cluster) is operationally meaningful but not always cleanly resolvable per-incident from public reporting.", "external_references": [ { "source_name": "oak", "external_id": "OAK-G07", "url": "https://onchainattack.org/#/group/OAK-G07" } ] }, { "type": "intrusion-set", "spec_version": "2.1", "id": "intrusion-set--3adb2eec-bad1-5bb3-ba32-1d86e8069b69", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "BlueNoroff (DPRK financial-institution and crypto-firm intrusion sub-cluster)", "description": "OAK OAK-G08 — attribution status: **confirmed** at the *cluster-and-state-attribution* level — U.S. Department of the Treasury OFAC SDN designation of BlueNoroff on September 13, 2019 under Executive Orders 13694 and 13757 (Treasury press release SM-774, designating Lazarus Group, BlueNoroff, and Andariel as three separate sub-cluster entries belonging to the DPRK Reconnaissance General Bureau) (`[ofac2019dprkclusters]`); external Group ID G0082 (BlueNoroff) and G0079 / G0138 mappings for the APT38 / TraderTraitor naming overlap; CISA / FBI / Treasury joint cybersecurity advisory AA22-108A of April 2022 documenting the *TraderTraitor* sub-set of cluster activity — partially but not entirely co-extensive with BlueNoroff (`[cisa2022tradertraitor]`); long-running multi-vendor industry-forensic record across Kaspersky GReAT (BlueNoroff naming origin, 2017 onward), Mandiant (APT38 naming, 2018 onward), Jamf Threat Labs (RustBucket macOS family, 2023 onward), SentinelOne (ObjCShellz / RustBucket follow-on, 2023), Volexity, and Microsoft Threat Intelligence (Sapphire Sleet naming, 2023 onward). Attribution that *specific cryptocurrency-theft incidents* are downstream of an OAK-G08 placement (rather than an OAK-G01 placement) is **inferred-strong** in most cases — the BlueNoroff / TraderTraitor sub-cluster boundary inside the broader Lazarus / RGB whole is operationally meaningful but not always cleanly resolvable per-incident from public reporting; some incidents (DMM Bitcoin, May 2024) are attributed to TraderTraitor in primary FBI / DC3 / NPA documents while concurrent industry write-ups discuss BlueNoroff overlap.", "external_references": [ { "source_name": "oak", "external_id": "OAK-G08", "url": "https://onchainattack.org/#/group/OAK-G08" } ] }, { "type": "intrusion-set", "spec_version": "2.1", "id": "intrusion-set--0184acd8-671f-54aa-8ae7-7c61c7bf4dc8", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Andariel (DPRK ransomware-and-ICS sub-cluster within the Lazarus / RGB ecosystem)", "description": "OAK OAK-G09 — attribution status: **confirmed** at the *cluster-and-state-attribution* level — U.S. Department of the Treasury OFAC SDN designation of Andariel under Executive Orders 13694 and 13722 on September 13, 2019 (`[ofac2019dprkcyber]`, Treasury press release SM-774), in coordinated action that designated Lazarus, BlueNoroff, and Andariel as three separate but related DPRK state-sponsored sub-clusters subordinate to the Reconnaissance General Bureau; CISA / FBI / U.S. Treasury joint cybersecurity advisory AA22-187A of July 6, 2022, \"North Korean State-Sponsored Cyber Actors Use Maui Ransomware to Target the Healthcare and Public Health Sector,\" with explicit Andariel attribution and the canonical public characterisation of the Maui-ransomware-against-healthcare operational pattern (`[cisa2022aa22187a]`); U.S. Department of Justice unsealed indictment of Rim Jong Hyok of July 25, 2024, charging the named Andariel operator with a multi-year campaign of healthcare-sector ransomware attacks and DIB-intrusion espionage, accompanied by a U.S. Department of State \\$10M reward (`[doj2024rimjonghyok]`); CISA / FBI / NSA / ROK NIS / NPA / DSA / U.K. NCSC joint cybersecurity advisory of July 25, 2024, \"North Korea state-sponsored cyber group conducts global espionage campaign to advance regime's military and nuclear programs\" (`[cisa2024andarieladvisory]`); ROK National Police Agency public attribution actions of 2023–2024; sustained multi-vendor industry-forensic record (Mandiant APT45 reporting, Microsoft Onyx Sleet reporting, Kaspersky Andariel reporting, SentinelOne, Symantec / Broadcom Stonefly reporting). Attribution that *specific cryptocurrency ransom-payment flows* trace to G09 versus other DPRK ransomware-touching activity is **inferred-strong** in most cases — the Maui-ransomware-attributed payment surface is small relative to the Lazarus crypto-theft surface, and per-victim public reporting of payment-trail forensics is sparse. Attribution that *specific Black Basta–attributed payments* trace to Andariel rather than to the Russian-speaking Black Basta core is **inferred-strong** at best and is flagged in Discussion below; OAK does not publish the Andariel × Black Basta overlap as confirmed at v0.1.", "external_references": [ { "source_name": "oak", "external_id": "OAK-G09", "url": "https://onchainattack.org/#/group/OAK-G09" } ] }, { "type": "intrusion-set", "spec_version": "2.1", "id": "intrusion-set--02bfdd95-e888-5f32-95d8-90fbda1f2e39", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "ALPHV / BlackCat Ransomware-as-a-Service operation", "description": "OAK OAK-G10 — attribution status: **confirmed** at the *operator-cluster-and-named-affiliate* level — U.S. Federal Bureau of Investigation / Department of Justice disruption operation announced December 19, 2023, including FBI access to the ALPHV decryptor and a CISA / FBI joint advisory characterising the cluster's TTPs (`[fbi2023blackcatdisruption]`, `[cisa2023blackcatadvisory]`); DOJ indictments unsealed across 2024 against multiple Scattered Spider members for the September 2023 MGM Resorts and Caesars Entertainment campaigns and earlier Reddit-targeting activity (`[doj2024scatteredspider]`); HHS / U.S. Department of Health and Human Services public advisories on the February 21, 2024 Change Healthcare incident (`[hhs2024changehealthcare]`); sustained multi-vendor industry-forensic corroboration (Mandiant, Microsoft, Sophos, SentinelOne, Recorded Future, Chainalysis, TRM Labs, Symantec) characterising the Rust-based encryptor lineage, the Russian-language operator-forum substrate, the affiliate-cut economics, and the February-to-March 2024 self-exit-scam dynamic. ALPHV itself was not OFAC-designated as a cluster within its operating window; that distinction makes G10 a *confirmed-by-disruption-and-indictment* rather than *confirmed-by-OFAC-SDN-designation* case at v0.1, which is operationally important for the *asset-freeze counter-factual* discussed below. Attribution that *specific ransom-payment flows* trace to specific affiliate wallets within the ALPHV cluster is **inferred-strong** from industry forensic providers; the canonical instance is the \\~\\$22M Bitcoin payment from Change Healthcare that was traced on-chain by Chainalysis and TRM Labs to an affiliate wallet before the operator-side exit-scam diverted the funds out of affiliate control (`[chainalysis2024alphvexit]`, `[trm2024changehealthcare]`).", "external_references": [ { "source_name": "oak", "external_id": "OAK-G10", "url": "https://onchainattack.org/#/group/OAK-G10" } ] }, { "type": "intrusion-set", "spec_version": "2.1", "id": "intrusion-set--5a3de7b5-cc0c-5c84-a4bd-b5a7b8252e40", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Black Basta Ransomware-as-a-Service operation", "description": "OAK OAK-G11 — attribution status: **confirmed** at the *cluster-and-tooling* level — joint CISA / FBI / HHS / MS-ISAC cyber-security advisory AA24-131A \"StopRansomware: Black Basta,\" May 10, 2024 (`[cisa2024aa24131ablackbasta]`), characterising the cluster's TTPs across the healthcare and other critical-infrastructure sectors and naming Black Basta as a closed RaaS operating brand with hundreds of named victims; sustained multi-vendor industry-forensic corroboration (Mandiant UNC4393 tracking, Microsoft Storm-1811 / Storm-0506 sub-cluster attribution, Recorded Future, SentinelOne, Sophos, Symantec) characterising the encryptor lineage, the Russian-language operator-forum substrate, the Conti-2022-organisational-continuity dispersal pattern, and the affiliate-cut economics; the February 2025 leaked Black Basta internal-chats archive (\"BlackBastaLeaks\"), which surfaced operator-and-affiliate Jabber/Matrix communications and externally validated the cluster-internal organisational structure inferred from prior industry-forensic tracking. The Conti-organisational-continuity claim is *inferred-strong* — overlap of operator personas, Bitcoin-funder-cluster reuse across the Conti-shutdown / Black Basta-launch window, and shared TTPs (QakBot loader chain, Cobalt Strike post-exploit tooling, Empire / BloodHound lateral-movement) are documented across Mandiant, CrowdStrike, and Recorded Future tracking but the cluster has not been individually OFAC-designated or DOJ-indicted at the principal-operator level as of v0.1. Attribution that *specific ransom-payment flows* trace to specific affiliate wallets within the Black Basta cluster is **inferred-strong** from industry forensic providers; the Elliptic 2024 retrospective traced approximately \\$107M in confirmed Bitcoin ransom payments to Black Basta-attributable wallet clusters across the cluster's first 18 months of operation (`[elliptic2024blackbasta]`), with downstream laundering routes sharing the broader Russian-language commercial-criminal off-ramp profile.", "external_references": [ { "source_name": "oak", "external_id": "OAK-G11", "url": "https://onchainattack.org/#/group/OAK-G11" } ] }, { "type": "intrusion-set", "spec_version": "2.1", "id": "intrusion-set--a33c0569-65d6-56bb-9327-211ecf4389ea", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Scattered Spider / UNC3944 (English-speaking financially-motivated affiliate cluster)", "description": "OAK OAK-G12 — attribution status: **confirmed** at the *cluster-and-named-affiliate* level — U.S. Department of Justice indictments unsealed across 2024 against multiple Scattered Spider members, notably the November 13, 2024 indictment of five U.S.-and-U.K.-resident defendants (Elbadawy, Urban, Osiebo, Evans, Buchanan) for wire fraud, conspiracy, and aggravated identity theft tied to the MGM Resorts and Caesars Entertainment campaigns and earlier intrusions (`[doj2024scatteredspider]`); the July 2024 Spanish National Police arrest of Tyler Robert Buchanan in Palma de Mallorca pursuant to U.S. and U.K. extradition requests; U.K. National Crime Agency arrests of multiple U.K.-resident members through 2024-and-2025; sustained multi-vendor industry-forensic corroboration (Mandiant UNC3944, Microsoft Octo Tempest, Palo Alto Unit 42 Muddled Libra, Group-IB 0ktapus, Okta Scatter Swine, Trellix, CrowdStrike, Recorded Future) characterising the cluster's social-engineering-led intrusion style, the predominantly-English-speaking-and-Western-passport member composition, and the multi-RaaS-affiliate operating model. Attribution that *specific cryptocurrency-firm intrusions* are downstream of a Scattered Spider placement is **inferred-strong** for most cases — multiple 2022-to-2024 cryptocurrency-firm SIM-swap and social-engineering intrusions show TTPs consistent with the Scattered Spider operational profile per Mandiant, Microsoft, and Trellix tracking, but per-incident affiliate-attribution to the named DOJ defendants requires court-filing-level evidentiary specificity that is not always publicly available.", "external_references": [ { "source_name": "oak", "external_id": "OAK-G12", "url": "https://onchainattack.org/#/group/OAK-G12" } ] }, { "type": "intrusion-set", "spec_version": "2.1", "id": "intrusion-set--b6280d45-80d0-516a-a4dd-4e75416464ca", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Iranian financially-motivated cyber operators (MuddyWater + Charming Kitten + Pioneer Kitten cluster set)", "description": "OAK OAK-G13 — attribution status: **confirmed** at the *cluster-set-and-state-attribution* level — multiple OFAC SDN designations against IRGC-affiliated cyber units and individuals across 2018-to-2024 (`[ofac2018samsam]`, `[ofac2020apt39]`, `[ofac2022irgcyber]`); CISA AA22-257A \"Iranian Islamic Revolutionary Guard Corps-Affiliated Cyber Actors Exploiting Vulnerabilities for Data Extortion and Ransomware Operations,\" September 14, 2022 (`[cisa2022aa22257a]`); CISA AA22-055A \"Iranian Government-Sponsored MuddyWater Actors Conducting Malicious Cyber Operations,\" February 24, 2022 (`[cisa2022aa22055a]`); CISA AA20-259A \"Iran-Based Threat Actor Exploits VPN Vulnerabilities,\" September 15, 2020 (`[cisa2020aa20259a]`); FBI Flash on Pioneer Kitten / Fox Kitten / Lemon Sandstorm activity, August 28, 2024 (`[fbi2024pioneerkittenflash]`); January 2022 U.S. Cyber Command attribution of MuddyWater to MOIS; sustained multi-vendor industry-forensic corroboration (Mandiant, Microsoft, CrowdStrike, ClearSky, Recorded Future, Kaspersky, Check Point, ESET) characterising the cluster set's TTPs and the IRGC-vs-MOIS sub-cluster boundary. Attribution that *specific cryptocurrency-theft or ransomware-payment incidents* are downstream of a specific Iranian sub-cluster placement is **inferred-strong** in many cases — the per-incident MuddyWater-vs-Charming-Kitten-vs-Pioneer-Kitten partition is operationally meaningful but not always cleanly resolvable from public reporting.", "external_references": [ { "source_name": "oak", "external_id": "OAK-G13", "url": "https://onchainattack.org/#/group/OAK-G13" } ] }, { "type": "intrusion-set", "spec_version": "2.1", "id": "intrusion-set--804c8d72-b1bf-566a-9563-9fa07aae1c53", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Cl0p / Clop Ransomware-and-Data-Extortion operation", "description": "OAK OAK-G14 — attribution status: **confirmed** at the *cluster-and-named-affiliate* level — U.S. Department of the Treasury OFAC June 2023 designations of multiple Cl0p-affiliated Russian nationals (`[ofac2023clopaffiliates]`); CISA / FBI / NSA / U.S. Cyber Command joint cyber-security advisory AA23-158A \"CL0P Ransomware Gang Exploits CVE-2023-34362 MOVEit Vulnerability,\" June 7, 2023 (`[cisa2023aa23158aclop]`); CISA / FBI joint cyber-security advisory AA23-039A \"#StopRansomware: CLOP Ransomware,\" February 8, 2023 (`[cisa2023aa23039aclop]`); June 2021 Ukrainian Cyber Police arrests of multiple Cl0p-affiliated individuals in coordination with the U.S. and South Korean law enforcement (`[ukrcyberpolice2021clop]`); U.S. Department of State Rewards for Justice \\$10M reward for information on Cl0p leadership and affiliates (consistent with the broader RfJ ransomware-leadership reward architecture); sustained multi-vendor industry-forensic corroboration (Mandiant, Microsoft, CrowdStrike, Sophos, Recorded Future, Coveware, Chainalysis, TRM Labs, Sangfor) characterising the encryptor lineage, the TA505 / FIN11 operator-cohort substrate, the data-extortion-only pivot of mid-2023, and the mass-exploitation operational signature. Attribution that *specific ransom-payment flows or data-extortion-payment flows* trace to specific affiliate wallets within the Cl0p cluster is **inferred-strong** from industry forensic providers; per Coveware and Chainalysis aggregate tracking, Cl0p-attributable extortion proceeds across the cluster's operating window exceed \\$100M and place the cluster in the top-tier of ransomware-and-data-extortion volume per the 2023-and-2024 Chainalysis ransomware reports (`[chainalysis2025ransomware]`).", "external_references": [ { "source_name": "oak", "external_id": "OAK-G14", "url": "https://onchainattack.org/#/group/OAK-G14" } ] }, { "type": "intrusion-set", "spec_version": "2.1", "id": "intrusion-set--1b552102-9688-5fb5-adc0-ea710eb9e8ea", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "RansomHub Ransomware-as-a-Service operation", "description": "OAK OAK-G15 — attribution status: **confirmed** at the *cluster-and-tooling* level — joint CISA / FBI / HHS / MS-ISAC cyber-security advisory AA24-242A \"StopRansomware: RansomHub Ransomware,\" August 29, 2024 (`[cisa2024aa24242aransomhub]`), characterising the cluster's TTPs across the healthcare and other critical-infrastructure sectors and naming RansomHub as the largest RaaS strain by victim-count in the immediate post-ALPHV-exit-scam window with more than 200 named victims through August 2024; sustained multi-vendor industry-forensic corroboration (Mandiant's UNC4393-adjacent and Notchy-affiliate tracking, Microsoft Threat Intelligence, Sophos, Symantec, Recorded Future, Coveware, Chainalysis, TRM Labs) characterising the Go-language encryptor lineage, the Russian-language operator-forum substrate, the affiliate-cut economics (\\~90 / 10 affiliate / operator split per industry-forensic tracking, more affiliate-favourable than the ALPHV \\~85 / 15 baseline and substantially more affiliate-favourable than the LockBit \\~80 / 20 baseline), and the post-ALPHV-affiliate-absorption pattern; Mandiant 2024 reporting describing RansomHub as \"the largest 2024 RaaS by post-ALPHV-exit-scam affiliate-absorption volume\" (`[mandiant2024ransomhub]`). RansomHub itself was not OFAC-designated as a cluster within its first 18 months of operation; that distinction makes G15 a *confirmed-by-CISA-advisory-and-industry-forensic-corroboration* rather than *confirmed-by-OFAC-SDN-designation* case at v0.1, structurally adjacent to OAK-G11 Black Basta on the attribution-strength axis. Attribution that *specific ransom-payment flows* trace to specific affiliate wallets within the RansomHub cluster is **inferred-strong** from industry forensic providers; the canonical instance is the cluster-continuity attestation linking Notchy and other ALPHV-displaced affiliates to RansomHub-cluster wallet activity in the months following the March 2024 ALPHV exit-scam (`[chainalysis2025ransomware]`, `[trm2024ransomhub]`).", "external_references": [ { "source_name": "oak", "external_id": "OAK-G15", "url": "https://onchainattack.org/#/group/OAK-G15" } ] }, { "type": "intrusion-set", "spec_version": "2.1", "id": "intrusion-set--c49d1031-95b3-573d-8daa-a2bf2cd66c77", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Akira Ransomware-as-a-Service operation", "description": "OAK OAK-G16 — attribution status: **confirmed** at the *cluster-and-tooling* level — joint CISA / FBI / Europol EC3 / Netherlands NCSC-NL cyber-security advisory AA24-109A \"StopRansomware: Akira Ransomware,\" April 18, 2024 (`[cisa2024aa24109aakira]`), characterising the cluster's TTPs across the manufacturing, education, financial-services, and other sectors, naming Akira as a high-volume RaaS strain with approximately 250 victim organisations and approximately \\$42M in confirmed ransom-payment proceeds through January 2024, and identifying the Akira-affiliate cohort's exploitation-of-public-facing-vulnerabilities and Cisco-VPN-without-MFA initial-access vectors; sustained multi-vendor industry-forensic corroboration (Mandiant tracking, Microsoft Storm-1567, Sophos X-Ops, Recorded Future, Coveware, Chainalysis, TRM Labs) characterising the C++-and-Rust encryptor lineage, the Russian-language operator-forum substrate, the Conti-codebase-related lineage attestation, and the affiliate-cut economics; Sophos late-2023 reporting on the Megazord encryptor-variant as a Rust-based redevelopment of the Akira codebase (`[sophos2023akira]`). The Conti-codebase-related lineage claim is *inferred-strong* — overlap of operator personas, encryptor-architecture decisions, and TTP-fingerprint signal across the Conti-shutdown / Akira-launch window are documented across Mandiant, Microsoft, and Sophos tracking but the cluster has not been individually OFAC-designated or DOJ-indicted at the principal-operator level as of v0.1. Attribution that *specific ransom-payment flows* trace to specific affiliate wallets within the Akira cluster is **inferred-strong** from industry forensic providers; per CISA AA24-109A and Chainalysis aggregate tracking, Akira-attributable ransom-payment proceeds across the cluster's first 10 months of operation total approximately \\$42M, with downstream laundering routes sharing the broader Russian-language commercial-criminal off-ramp profile.", "external_references": [ { "source_name": "oak", "external_id": "OAK-G16", "url": "https://onchainattack.org/#/group/OAK-G16" } ] }, { "type": "intrusion-set", "spec_version": "2.1", "id": "intrusion-set--6635387a-3ff2-5c07-8112-fbc9a4254690", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "BlackByte Ransomware-as-a-Service operation", "description": "OAK OAK-G17 — attribution status: **confirmed** at the *cluster-and-tooling* level — joint FBI / U.S. Secret Service cyber-security advisory CU-000167-MW (Feb 11 2022 FBI Flash) and the joint FBI / U.S. Secret Service Joint Cybersecurity Advisory TLP:WHITE on BlackByte Ransomware (the same February 2022 advisory cycle frequently referenced by industry-forensic write-ups as \"TA22-039A-equivalent\" though the canonical CISA advisory tracker uses the FBI Flash format rather than the AA-NNNNN tracker number) (`[fbi2022blackbyteflash]`), characterising the cluster's TTPs across U.S. critical-infrastructure entities including the February 2022 attack against the San Francisco 49ers professional sports franchise; sustained multi-vendor industry-forensic corroboration (Mandiant tracking, Microsoft Threat Intelligence, Sophos X-Ops, Trustwave SpiderLabs, Symantec Threat Hunter Team, Recorded Future, Coveware, Chainalysis, TRM Labs) characterising the multi-language encryptor lineage, the Russian-language operator-forum substrate, the Conti-splinter lineage attestation, and sustained 2022-and-2023 cross-platform encryptor-variant development including the Go-language variant; Trustwave SpiderLabs late-2021 reporting on the BlackByte encryptor's symmetric-key-reuse implementation flaw that allowed the publication of a free decryptor (`[trustwave2021blackbyte]`); subsequent BlackByte-encryptor redevelopment to address the cryptographic flaw and extend the cross-platform variant set. The Conti-splinter lineage claim is *inferred-strong* — overlap of operator personas, encryptor-architecture decisions, and TTP-fingerprint signal across the Conti-organisational substrate are documented across Mandiant, Microsoft, and Sophos tracking but the cluster has not been individually OFAC-designated or DOJ-indicted at the principal-operator level as of v0.1. Attribution that *specific ransom-payment flows* trace to specific affiliate wallets within the BlackByte cluster is **inferred-strong** from industry forensic providers.", "external_references": [ { "source_name": "oak", "external_id": "OAK-G17", "url": "https://onchainattack.org/#/group/OAK-G17" } ] }, { "type": "intrusion-set", "spec_version": "2.1", "id": "intrusion-set--fc2d4c9b-40e7-5631-affb-97bf77e6d21d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Karakurt extortion-only data-theft operation", "description": "OAK OAK-G18 — attribution status: **confirmed** at the *cluster-and-CISA-advisory* level — CISA / FBI / U.S. Department of the Treasury / FinCEN joint cyber-security advisory AA22-152A \"Karakurt Data Extortion Group,\" June 1, 2022 (`[cisaaa22152a]`), with a March 2023 update extending the Karakurt-cohort tracking through 2023; multi-vendor industry-forensic corroboration (Mandiant, Microsoft, CrowdStrike, Sophos, Recorded Future, Coveware, Chainalysis, TRM Labs) characterising the Conti-cohort-continuity attribution at the operator-cohort level and the data-extortion-only operating-model signature; Tetra Defense and Infinitum I.T. cross-vendor reporting on Karakurt-attributed intrusions and the recovery-and-negotiation behaviour profile. Attribution that *specific extortion-payment flows trace to specific Conti-successor affiliate wallets within the Karakurt cluster* is **inferred-strong** from industry-forensic providers; per Chainalysis and Mandiant cross-cohort analysis, Karakurt affiliate wallet clusters share funder addresses with documented Conti-era and Black Basta affiliate clusters, supporting the Conti-cohort-continuity attribution at the on-chain layer.", "external_references": [ { "source_name": "oak", "external_id": "OAK-G18", "url": "https://onchainattack.org/#/group/OAK-G18" } ] }, { "type": "intrusion-set", "spec_version": "2.1", "id": "intrusion-set--8c97db8e-c9d4-5005-9a45-580156b179fe", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "DarkSide Ransomware-as-a-Service operation", "description": "OAK OAK-G19 — attribution status: **confirmed** — FBI attributed the Colonial Pipeline attack to DarkSide (May 2021); DOJ seizure warrant filed in the Northern District of California recovered 63.7 BTC of the 75 BTC ransom payment via private-key recovery (June 2021); CISA Alert AA21-131A on DarkSide ransomware TTPs (May 2021). Attribution of the DarkSide-to-BlackMatter rebrand is **inferred-strong** per multi-vendor industry forensic consensus (Chainalysis, TRM Labs, Mandiant, CrowdStrike), based on code-overlap analysis, shared infrastructure, overlapping affiliate roster, and identical RaaS revenue-split structure.", "external_references": [ { "source_name": "oak", "external_id": "OAK-G19", "url": "https://onchainattack.org/#/group/OAK-G19" } ] }, { "type": "intrusion-set", "spec_version": "2.1", "id": "intrusion-set--aa580d7c-66c9-58f8-bebe-f94d8b53a40a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "TeamPCP (cross-ecosystem supply-chain worm operator)", "description": "OAK OAK-G20 — attribution status: **inferred-strong at the cluster level, self-claimed per campaign.** No individual has been named, indicted, or arrested, and no state alignment is claimed by any vendor. What supports the cluster identity is unusually strong for an unindicted group: the operators **claim their campaigns publicly** (credential dumps published to GitHub repositories captioned *\"A Mini Shai-Hulud has Appeared\"*, forum posts claiming the GitHub and Nx breaches), the campaigns share a consistent naming-and-infrastructure theme, and the cluster is tracked independently by **Google Threat Intelligence Group (UNC6780)**, **JFrog**, **Snyk**, **Orca**, **Tenable**, **StepSecurity** and **Cloud Security Alliance**. OAK records the cluster as inferred-strong rather than confirmed because self-claim is not evidence of identity — it establishes that one operator group claims a set of campaigns, not who they are.", "external_references": [ { "source_name": "oak", "external_id": "OAK-G20", "url": "https://onchainattack.org/#/group/OAK-G20" } ] }, { "type": "x-oak-data-source", "spec_version": "2.1", "id": "x-oak-data-source--f3c39da7-0634-58ad-a556-6bdf6eb36956", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Token Deployment Events and Bytecode", "description": "Records the moment a new token contract is deployed: deployer address, deployment block, raw bytecode, constructor parameters, and (for Solana SPL Token-2022) the list of enabled extensions and their authorities. From a defender's perspective this is the earliest observable signal in a token's lifecycle, and it is the substrate on which OAK-T1 (Token Genesis) Techniques are detected.", "external_references": [ { "source_name": "oak", "external_id": "OAK-DS-01", "url": "https://onchainattack.org/#/datasource/OAK-DS-01" } ] }, { "type": "x-oak-data-source", "spec_version": "2.1", "id": "x-oak-data-source--afa7090f-041a-5bf1-8460-eb48ed4f4d77", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "DEX Pool Creation and Liquidity Events", "description": "Records the lifecycle of DEX liquidity pools: creation, liquidity provision, liquidity removal. The destination of LP tokens at provision time is the canonical \"who controls liquidity\" signal, and the size and timing of liquidity removal events is the canonical OAK-T5.001 (Hard LP Drain) signal.", "external_references": [ { "source_name": "oak", "external_id": "OAK-DS-02", "url": "https://onchainattack.org/#/datasource/OAK-DS-02" } ] }, { "type": "x-oak-data-source", "spec_version": "2.1", "id": "x-oak-data-source--63140fbf-45e9-5645-a015-e07da68ba4e5", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Token Approval Events", "description": "Records the granting of transfer authority from a token holder to a third-party spender or operator. T4.004 (Approve-Pattern Drainer) and T4.005 (setApprovalForAll NFT Drainer) both produce explicit `Approval` / `ApprovalForAll` events at the moment of authority grant — making these the highest-leverage detection-side telemetry for the on-chain authority artefact.", "external_references": [ { "source_name": "oak", "external_id": "OAK-DS-03", "url": "https://onchainattack.org/#/datasource/OAK-DS-03" } ] }, { "type": "x-oak-data-source", "spec_version": "2.1", "id": "x-oak-data-source--3858886c-02f1-5c82-b8c5-1e78830e672e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Permit / Permit2 Off-Chain Signatures", "description": "Records EIP-2612 `permit` and Uniswap Permit2 signed authorisations. Distinct from DS-03 (on-chain `Approval` events) because the authority artefact lives off-chain as a signed payload until consumed on-chain by the holder of the signature. The off-chain payload contains the full authority scope (spender, token, value, deadline, nonce) and is the canonical detection surface for OAK-T4.001 — but only at the wallet-UX layer, since the on-chain consumption event arrives after the authority has alre", "external_references": [ { "source_name": "oak", "external_id": "OAK-DS-04", "url": "https://onchainattack.org/#/datasource/OAK-DS-04" } ] }, { "type": "x-oak-data-source", "spec_version": "2.1", "id": "x-oak-data-source--e11ce8db-d70e-5ea8-bca6-4e9860b5be92", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Oracle Price Feeds and Oracle-Input Trades", "description": "Records oracle price updates and the input-venue trades that feed them. Critical for OAK-T9.001 detection because the canonical attack pattern moves the oracle's reported price through trades on its input venues; the oracle-side telemetry is the leading indicator of an in-progress oracle-manipulation event.", "external_references": [ { "source_name": "oak", "external_id": "OAK-DS-05", "url": "https://onchainattack.org/#/datasource/OAK-DS-05" } ] }, { "type": "x-oak-data-source", "spec_version": "2.1", "id": "x-oak-data-source--17d8413a-4d20-5c1c-a1d6-968b68fdb8f5", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Token Mint and Burn Events", "description": "Records changes to a token's total supply. Critical for OAK-T5.003 (Hidden-Mint Dilution) detection — both pre-event (presence of mint authority) and at-event (mint to deployer-clustered addresses).", "external_references": [ { "source_name": "oak", "external_id": "OAK-DS-06", "url": "https://onchainattack.org/#/datasource/OAK-DS-06" } ] }, { "type": "x-oak-data-source", "spec_version": "2.1", "id": "x-oak-data-source--83410f0c-3d3e-5807-ba5e-ee87af4a3447", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "DEX Trade and Swap Events", "description": "Records DEX trades — the on-chain artefact of every swap, sandwich, wash-trade, and oracle-input-venue manipulation. The most heavily-indexed Data Source in the on-chain space; near-zero access cost via standard indexers.", "external_references": [ { "source_name": "oak", "external_id": "OAK-DS-07", "url": "https://onchainattack.org/#/datasource/OAK-DS-07" } ] }, { "type": "x-oak-data-source", "spec_version": "2.1", "id": "x-oak-data-source--03ae9ba7-3d37-5555-9fc6-c9763cffdc52", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Bridge Validator Messages and VAAs", "description": "Records cross-chain authorisation messages: the signed payloads (often called VAAs — Validator Action Approvals — in Wormhole-style architectures, or generic threshold-signed messages in MPC-style bridges) that authorise asset movements across chains. Critical for OAK-T10 detection across all three Techniques.", "external_references": [ { "source_name": "oak", "external_id": "OAK-DS-08", "url": "https://onchainattack.org/#/datasource/OAK-DS-08" } ] }, { "type": "x-oak-data-source", "spec_version": "2.1", "id": "x-oak-data-source--dba14e9b-547b-5e8d-afc3-93d112893337", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Funder Graph (Derived)", "description": "Records the per-address graph of funding sources, computed from raw transfer events. For each address, the funder graph identifies the set of upstream addresses that have sent funds to it (directly or via N hops), allowing defenders to detect operator clusters that share funding ancestors. The most important *derived* Data Source in OAK because the underlying detection methodology for OAK-T3.001, T8.001, and the broader Group-attribution (`actors/`) axis depends on it.", "external_references": [ { "source_name": "oak", "external_id": "OAK-DS-09", "url": "https://onchainattack.org/#/datasource/OAK-DS-09" } ] }, { "type": "x-oak-data-source", "spec_version": "2.1", "id": "x-oak-data-source--35ae6f15-2676-56bf-9798-6ade8a05e805", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Cross-Chain Bridge and Swap Flows", "description": "Records cross-chain asset movements: deposits on the source chain, settlements on the destination chain, and (for cross-chain swap protocols) per-swap fee accrual to protocol operators. Critical for OAK-T7.003 (Cross-Chain Bridge Laundering) detection, including the protocol-economics signal (sudden fee accrual correlated with illicit-cluster inflow) introduced in the T7.003 page.", "external_references": [ { "source_name": "oak", "external_id": "OAK-DS-10", "url": "https://onchainattack.org/#/datasource/OAK-DS-10" } ] }, { "type": "x-oak-data-source", "spec_version": "2.1", "id": "x-oak-data-source--f1741bb2-760f-5c0b-b8f8-7db1418453ae", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Mempool and Pre-Block Order Flow", "description": "Records pending transactions and pre-block order flow — the \"what is about to be confirmed\" surface that sandwich-MEV operators (T5.004) operate on, and that some pre-event detection (T9.002 flash-loan setup; T9.001 oracle-input-trade staging) requires. Substantially less universally-accessible than on-chain Data Sources because much modern transaction flow is routed through private mempools specifically to defeat front-running.", "external_references": [ { "source_name": "oak", "external_id": "OAK-DS-11", "url": "https://onchainattack.org/#/datasource/OAK-DS-11" } ] }, { "type": "x-oak-data-source", "spec_version": "2.1", "id": "x-oak-data-source--ffb2eb6b-9321-59af-afe2-08d93fe4ef01", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Off-Chain CTI Feeds", "description": "Records off-chain telemetry that informs on-chain attack detection: phishing-campaign indicators, DNS / hosting compromise, social-engineering campaigns targeting validator-operator personnel, fake-job-offer LinkedIn campaigns, compromised-Discord-server announcements. Distinct from all on-chain Data Sources because the telemetry originates outside the blockchain layer entirely. Critical for the entry-vector detection of OAK-T4.002, T4.005, T10.001, and the broader OAK-G01 Lazarus Group operator", "external_references": [ { "source_name": "oak", "external_id": "OAK-DS-12", "url": "https://onchainattack.org/#/datasource/OAK-DS-12" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--6b90c442-ee11-5f26-a07c-1e1fa2d093b3", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Mt. Gox Bitcoin exchange launch — Bitcoin — 2010-07", "x_oak_date_prefix": "2010-07", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2010-07-mtgox-bitcoin-exchange-launch", "url": "https://onchainattack.org/document/examples/2010-07-mtgox-bitcoin-exchange-launch/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--bb084d4d-e596-5a86-84e6-1b5aff792c47", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Bitcoin Value Overflow Bug — Bitcoin protocol — 2010-08-15 (block 74638)", "x_oak_date_prefix": "2010-08", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2010-08-bitcoin-value-overflow-bug", "url": "https://onchainattack.org/document/examples/2010-08-bitcoin-value-overflow-bug/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--c6c15f07-b971-5fe8-b1cc-e6b8a4497e2a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Slush Pool — first Bitcoin mining pool launch — Bitcoin — 2010-12-16", "x_oak_date_prefix": "2010-12", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2010-12-slush-pool-first-mining-pool", "url": "https://onchainattack.org/document/examples/2010-12-slush-pool-first-mining-pool/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--a4daaf07-44b5-5260-9306-9ec171779fe6", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Navinder Sarao CME futures spoofing — CME Globex (equity futures) — 2010–2015", "x_oak_date_prefix": "2010-20", "x_oak_attribution": "confirmed", "external_references": [ { "source_name": "oak", "external_id": "2010-2015-navinder-sarao-cme-futures-spoofing", "url": "https://onchainattack.org/document/examples/2010-2015-navinder-sarao-cme-futures-spoofing/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--b340fb99-4cec-551b-92d5-e481a7266620", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Allinvain first major Bitcoin theft — Bitcoin — 2011-06-13", "x_oak_date_prefix": "2011-06", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2011-06-allinvain-first-major-bitcoin-theft", "url": "https://onchainattack.org/document/examples/2011-06-allinvain-first-major-bitcoin-theft/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--b9ed6274-9ae7-5a5a-a1ce-2fd53a20b9af", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Mt. Gox auditor account compromise — Bitcoin — 2011-06-19", "x_oak_date_prefix": "2011-06", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2011-06-mtgox-auditor-account-compromise", "url": "https://onchainattack.org/document/examples/2011-06-mtgox-auditor-account-compromise/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--91e0e735-8524-5aa5-8c05-dd4a5660863e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "MyBitcoin wallet-service collapse — Bitcoin — 2011-07 to 2011-08", "x_oak_date_prefix": "2011-07", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2011-07-mybitcoin", "url": "https://onchainattack.org/document/examples/2011-07-mybitcoin/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--d1e601e8-c39b-513a-9fee-ec650eb29c10", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Silk Road darknet marketplace — Bitcoin — 2011-02 to 2013-10", "x_oak_date_prefix": "2011-20", "x_oak_attribution": "confirmed", "external_references": [ { "source_name": "oak", "external_id": "2011-2013-silk-road", "url": "https://onchainattack.org/document/examples/2011-2013-silk-road/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--b31f6c24-52a6-5c95-860b-51994c3b2ff6", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "BTC-e exchange account farming and sybil infrastructure — 2011–2017", "x_oak_date_prefix": "2011-20", "x_oak_attribution": "confirmed", "external_references": [ { "source_name": "oak", "external_id": "2011-2017-btc-e-account-infrastructure", "url": "https://onchainattack.org/document/examples/2011-2017-btc-e-account-infrastructure/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--c8974fec-0f97-58a8-9f6c-19ab4a0481f5", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Darknet Marketplace Operations and Takedowns Cohort — 2011–2025 — 9 Landmarks", "x_oak_date_prefix": "2011-20", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2011-2025-darknet-marketplace-operations-cohort", "url": "https://onchainattack.org/document/examples/2011-2025-darknet-marketplace-operations-cohort/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--5938362b-9ba4-593c-bec4-49c3ea2b0828", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Bitcoinica exchange server compromise — Bitcoin — 2012-03-01", "x_oak_date_prefix": "2012-03", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2012-03-bitcoinica-exchange-hack", "url": "https://onchainattack.org/document/examples/2012-03-bitcoinica-exchange-hack/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--0551ce64-ad0d-5c62-8fac-649ce9ab4f33", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Linode Server Compromise — Bitcoin Service Infrastructure Attacks — 2012-03-01/02", "x_oak_date_prefix": "2012-03", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2012-03-linode-bitcoin-service-hacks", "url": "https://onchainattack.org/document/examples/2012-03-linode-bitcoin-service-hacks/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--44b3403b-6897-5d17-8860-b02b8409b65a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Bitfloor exchange hot-wallet compromise — Bitcoin — 2012-09 (reported 2012-09-05)", "x_oak_date_prefix": "2012-05", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2012-05-bitfloor", "url": "https://onchainattack.org/document/examples/2012-05-bitfloor/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--3590e500-06bc-5d39-91b2-5596a634bcf8", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Bitcoin Savings & Trust Ponzi — Bitcoin — 2011-02 to 2012-08", "x_oak_date_prefix": "2012-08", "x_oak_attribution": "confirmed", "external_references": [ { "source_name": "oak", "external_id": "2012-08-bitcoin-savings-trust", "url": "https://onchainattack.org/document/examples/2012-08-bitcoin-savings-trust/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--b33fd0fd-47d3-5585-b421-3186fa21bfc9", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "GLBSE (Global Bitcoin Stock Exchange) operator shutdown — Bitcoin — 2012-09", "x_oak_date_prefix": "2012-09", "x_oak_attribution": "confirmed", "external_references": [ { "source_name": "oak", "external_id": "2012-09-glbse-shutdown", "url": "https://onchainattack.org/document/examples/2012-09-glbse-shutdown/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--5e01e539-c584-5190-b2e7-a6bec9dd3463", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Inputs.io web-wallet hack — Bitcoin — 2013-10", "x_oak_date_prefix": "2013-10", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2013-10-inputs-io", "url": "https://onchainattack.org/document/examples/2013-10-inputs-io/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--ab776a28-bbde-5c0f-997e-560dba4b35bd", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Sheep Marketplace exit scam — Bitcoin — 2013-11 to 2013-12", "x_oak_date_prefix": "2013-11", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2013-11-sheep-marketplace", "url": "https://onchainattack.org/document/examples/2013-11-sheep-marketplace/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--436d6014-6e24-5abd-960b-9018b49eade3", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "GBL Bitcoin Exchange fraud / exit — 2013-10 to 2013-12", "x_oak_date_prefix": "2013-12", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2013-12-gbl-bitcoin-exchange-scam", "url": "https://onchainattack.org/document/examples/2013-12-gbl-bitcoin-exchange-scam/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--9efc929a-8c2d-52c6-bd4a-c2a0d0c1c58c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Emergence of blockchain transaction-graph forensics — Bitcoin — 2013–2015", "x_oak_date_prefix": "2013-20", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2013-2015-blockchain-forensics-emergence", "url": "https://onchainattack.org/document/examples/2013-2015-blockchain-forensics-emergence/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--8925bbbe-294f-582f-bcc9-aa9c18b9f645", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Off-chain opsec failure cohort enabling attribution — chain-agnostic (off-chain attribution surface) — 2013–2024", "x_oak_date_prefix": "2013-20", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2013-2024-off-chain-opsec-failure-attribution-cohort", "url": "https://onchainattack.org/document/examples/2013-2024-off-chain-opsec-failure-attribution-cohort/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--f3a0d545-9bda-54bd-bcb3-692784f94fb3", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Illicit-Purpose and Designated-Entity Financing Cohort — 2013–2025", "x_oak_date_prefix": "2013-20", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2013-2025-illicit-purpose-designated-entity-financing-cohort", "url": "https://onchainattack.org/document/examples/2013-2025-illicit-purpose-designated-entity-financing-cohort/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--edcc65e3-5134-5514-b912-3855b6e8b1e1", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "On-Chain De-Anonymization and Exchange Account-Farming Cohort — 2013–2025", "x_oak_date_prefix": "2013-20", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2013-2025-on-chain-deanonymization-and-exchange-account-farming-cohort", "url": "https://onchainattack.org/document/examples/2013-2025-on-chain-deanonymization-and-exchange-account-farming-cohort/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--d2542ecf-1b67-5388-aa40-b976f190993b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Meiklejohn Bitcoin address clustering research — 2013", "x_oak_date_prefix": "2013", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2013-meiklejohn-bitcoin-clustering", "url": "https://onchainattack.org/document/examples/2013-meiklejohn-bitcoin-clustering/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--37350f07-373a-58c3-905b-d7ca5e8bd42a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Silk Road \"altoid\" handle cross-layer de-anonymization — 2013", "x_oak_date_prefix": "2013", "x_oak_attribution": "confirmed", "external_references": [ { "source_name": "oak", "external_id": "2013-silk-road-altoid-handle", "url": "https://onchainattack.org/document/examples/2013-silk-road-altoid-handle/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--36cbe421-a5d1-5b59-99b1-fd7ff29ff70d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Cryptsy multi-asset hot-wallet drain + operator-fraud collapse — multi-asset / US altcoin exchange — 2014-01 (drained); 2016-01 (publicly disclosed); 2016 (Florida bankruptcy and civil judgement)", "x_oak_date_prefix": "2014-01", "x_oak_attribution": "confirmed", "external_references": [ { "source_name": "oak", "external_id": "2014-01-cryptsy", "url": "https://onchainattack.org/document/examples/2014-01-cryptsy/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--b42d6b4b-ebcf-5c4a-8111-5106c87a0cf2", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Mt. Gox exchange collapse — Bitcoin — 2011-09 to 2014-02 (filing); recovery through 2024–2025", "x_oak_date_prefix": "2014-02", "x_oak_attribution": "inferred-strong", "external_references": [ { "source_name": "oak", "external_id": "2014-02-mt-gox", "url": "https://onchainattack.org/document/examples/2014-02-mt-gox/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--8854936d-5bb9-5ba6-8ccd-3ef9aaf7abb5", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Flexcoin Bitcoin bank closure after hot-wallet hack — Bitcoin — 2014-03-02 to 2014-03-04", "x_oak_date_prefix": "2014-03", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2014-03-flexcoin-bitcoin-bank-closure", "url": "https://onchainattack.org/document/examples/2014-03-flexcoin-bitcoin-bank-closure/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--6c1d8b8f-e6c1-59d9-81dd-c745c79c7d21", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Poloniex withdrawal-race exploit — Bitcoin — 2014-03-04", "x_oak_date_prefix": "2014-03", "x_oak_attribution": "confirmed", "external_references": [ { "source_name": "oak", "external_id": "2014-03-poloniex", "url": "https://onchainattack.org/document/examples/2014-03-poloniex/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--2a97edab-0a2a-5fdb-a7d5-a2c7bdb3f905", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "MintPal hot-wallet compromise + operator-fraud collapse — multi-asset / UK altcoin exchange — 2014-09 to 2014-10", "x_oak_date_prefix": "2014-09", "x_oak_attribution": "confirmed", "external_references": [ { "source_name": "oak", "external_id": "2014-09-mintpal", "url": "https://onchainattack.org/document/examples/2014-09-mintpal/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--f89474b5-405b-51d7-b1db-f553f278eef1", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Moolah / Alex Green (Ryan Kennedy) Exchange Fraud — 2014-10", "x_oak_date_prefix": "2014-10", "x_oak_attribution": "confirmed", "external_references": [ { "source_name": "oak", "external_id": "2014-10-moolah-alex-green-fraud", "url": "https://onchainattack.org/document/examples/2014-10-moolah-alex-green-fraud/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--2bf8698b-fc7d-5c7f-b2b8-869f595f22ea", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "OneCoin — Ruja Ignatova / Karl Sebastian Greenwood multi-level fake-cryptocurrency Ponzi — global — 2014-2017 (operating) / 2017-onward (federal action)", "x_oak_date_prefix": "2014-20", "x_oak_attribution": "confirmed", "external_references": [ { "source_name": "oak", "external_id": "2014-2017-onecoin-ignatova", "url": "https://onchainattack.org/document/examples/2014-2017-onecoin-ignatova/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--ae9845cb-3748-5c47-90b0-78c2e13c9b49", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Chainalysis founding and Silk Road tracing — 2014", "x_oak_date_prefix": "2014", "x_oak_attribution": "confirmed", "external_references": [ { "source_name": "oak", "external_id": "2014-chainalysis-founding-silk-road-tracing", "url": "https://onchainattack.org/document/examples/2014-chainalysis-founding-silk-road-tracing/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--0b64e70c-d4e3-5870-8293-b4fd633aa7fb", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Bitstamp hot-wallet compromise — Bitcoin — 2015-01-04", "x_oak_date_prefix": "2015-01", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2015-01-bitstamp", "url": "https://onchainattack.org/document/examples/2015-01-bitstamp/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--1823de00-3527-5b37-815f-63c8c2d39e5e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Coin.mx unlicensed Bitcoin exchange prosecution — Bitcoin — 2015-07 (arrests)", "x_oak_date_prefix": "2015-01", "x_oak_attribution": "confirmed", "external_references": [ { "source_name": "oak", "external_id": "2015-01-coinmx-unlicensed-bitcoin-exchange", "url": "https://onchainattack.org/document/examples/2015-01-coinmx-unlicensed-bitcoin-exchange/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--d010f828-c1df-57cb-8358-8bb2427dc23c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "BTER hot-wallet drain — Bitcoin — 2015-02-14", "x_oak_date_prefix": "2015-02", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2015-02-bter", "url": "https://onchainattack.org/document/examples/2015-02-bter/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--07f65111-1a73-57cd-b1d5-f7feaa24e7b8", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Evolution Darknet Market Exit Scam — 2015-03", "x_oak_date_prefix": "2015-03", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2015-03-evolution-darknet-exit-scam", "url": "https://onchainattack.org/document/examples/2015-03-evolution-darknet-exit-scam/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--b257f6ae-1988-5850-a393-9332df592f88", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Bitfinex hot-wallet compromise — Bitcoin — 2015-05-22", "x_oak_date_prefix": "2015-05", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2015-05-bitfinex", "url": "https://onchainattack.org/document/examples/2015-05-bitfinex/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--aac75cbe-f43f-599d-8af7-80f366678070", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Cryptsy exchange collapse and operator-side theft — Bitcoin / altcoins — 2016-01-14", "x_oak_date_prefix": "2016-01", "x_oak_attribution": "confirmed", "external_references": [ { "source_name": "oak", "external_id": "2016-01-cryptsy-exchange-collapse", "url": "https://onchainattack.org/document/examples/2016-01-cryptsy-exchange-collapse/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--248a968b-da08-5213-aa77-eedd8537cdb1", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Gatecoin exchange hot-wallet compromise — Bitcoin / Ethereum — 2016-05-13", "x_oak_date_prefix": "2016-05", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2016-05-gatecoin", "url": "https://onchainattack.org/document/examples/2016-05-gatecoin/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--b86a7f40-4b26-5a9d-b28a-bd6dddb3203c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "The DAO reentrancy exploit — Ethereum — 2016-06-17", "x_oak_date_prefix": "2016-06", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2016-06-the-dao", "url": "https://onchainattack.org/document/examples/2016-06-the-dao/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--7810fb94-c05b-57a6-bab8-147f208075f6", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Bitfinex exchange theft — Bitcoin — 2016-08-02", "x_oak_date_prefix": "2016-08", "x_oak_attribution": "confirmed", "external_references": [ { "source_name": "oak", "external_id": "2016-08-bitfinex", "url": "https://onchainattack.org/document/examples/2016-08-bitfinex/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--a96d3171-ac99-5614-afb2-287e52db2959", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "IRS Coinbase John Doe Summons — 2016-11-30", "x_oak_date_prefix": "2016-11", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2016-11-coinbase-irs-john-doe-summons", "url": "https://onchainattack.org/document/examples/2016-11-coinbase-irs-john-doe-summons/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--b87e3103-97d8-5989-ae26-76c81467a295", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Big Pump Signal Telegram / Discord coordinated pump-and-dump cohort — multi-CEX (Binance / Cryptopia / Bittrex) — 2017–2018 (canonical academic anchor); cohort recurs through 2024", "x_oak_date_prefix": "2017-01", "x_oak_attribution": "inferred-strong", "external_references": [ { "source_name": "oak", "external_id": "2017-01-big-pump-signal-telegram-cohort", "url": "https://onchainattack.org/document/examples/2017-01-big-pump-signal-telegram-cohort/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--ac9dc4b2-8d86-5a33-878a-4c55daf8e9c1", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Yapizon (Youbit) exchange hack — Bitcoin — 2017-04-22", "x_oak_date_prefix": "2017-04", "x_oak_attribution": "inferred-weak", "external_references": [ { "source_name": "oak", "external_id": "2017-04-yapizon", "url": "https://onchainattack.org/document/examples/2017-04-yapizon/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--81390be8-81f6-5e04-b4f4-640accbaaadd", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Bithumb employee-laptop compromise + downstream phishing wave — multi-asset / Korean exchange — 2017-06 to 2017-09", "x_oak_date_prefix": "2017-06", "x_oak_attribution": "inferred-strong", "external_references": [ { "source_name": "oak", "external_id": "2017-06-bithumb", "url": "https://onchainattack.org/document/examples/2017-06-bithumb/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--9166fecb-9063-5dfc-8565-342c06317dfd", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "BTC-e exchange seizure and Alexander Vinnik arrest — Bitcoin — 2017-07-25 to 2017-07-26", "x_oak_date_prefix": "2017-07", "x_oak_attribution": "confirmed", "external_references": [ { "source_name": "oak", "external_id": "2017-07-btc-e-seizure", "url": "https://onchainattack.org/document/examples/2017-07-btc-e-seizure/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--f34489e0-6576-52e9-b22c-8944a1629f46", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Parity Multisig Wallet — Ethereum — 2017-07-19 and 2017-11-06", "x_oak_date_prefix": "2017-07", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2017-07-parity-multisig", "url": "https://onchainattack.org/document/examples/2017-07-parity-multisig/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--51e30262-65c5-5d56-b716-b25abc76cd32", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Tether treasury hack — Bitcoin (Omni Layer) — 2017-11-19", "x_oak_date_prefix": "2017-11", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2017-11-tether-treasury", "url": "https://onchainattack.org/document/examples/2017-11-tether-treasury/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--3b4a1767-e43b-571e-977e-3586edd2f19a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "NiceHash mining-marketplace wallet compromise — Bitcoin — 2017-12-06", "x_oak_date_prefix": "2017-12", "x_oak_attribution": "inferred-strong", "external_references": [ { "source_name": "oak", "external_id": "2017-12-nicehash", "url": "https://onchainattack.org/document/examples/2017-12-nicehash/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--ed4da23b-455d-52ea-8f72-1e0f6d880319", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Early Ledger Nano S Pre-Seeded Device Cohort — 2017–2019", "x_oak_date_prefix": "2017-20", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2017-2019-ledger-nano-s-counterfeit-cohort", "url": "https://onchainattack.org/document/examples/2017-2019-ledger-nano-s-counterfeit-cohort/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--5839b0c0-eee5-5eec-b05f-f82086bdd0d1", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Cross-exchange account farming infrastructure — chain-agnostic (exchange-side) — 2017–2025", "x_oak_date_prefix": "2017-20", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2017-2025-exchange-account-farming-cohort", "url": "https://onchainattack.org/document/examples/2017-2025-exchange-account-farming-cohort/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--d1caa7b3-a4e5-5803-a222-d14d1f741aa0", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Hardware-Wallet Physical Compromise Cohort — 2017–2025", "x_oak_date_prefix": "2017-20", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2017-2025-hardware-wallet-physical-compromise-cohort", "url": "https://onchainattack.org/document/examples/2017-2025-hardware-wallet-physical-compromise-cohort/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--77352fbb-7ef9-5ba6-975d-ea9170e1e721", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "BitConnect Ponzi collapse — Bitcoin / BitConnect — 2018-01-16", "x_oak_date_prefix": "2018-01", "x_oak_attribution": "confirmed", "external_references": [ { "source_name": "oak", "external_id": "2018-01-bitconnect", "url": "https://onchainattack.org/document/examples/2018-01-bitconnect/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--b332be92-a9ea-51d4-bd10-af626a206bf4", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Coincheck exchange hot-wallet theft — NEM / XEM — 2018-01-26", "x_oak_date_prefix": "2018-01", "x_oak_attribution": "inferred-strong", "external_references": [ { "source_name": "oak", "external_id": "2018-01-coincheck", "url": "https://onchainattack.org/document/examples/2018-01-coincheck/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--b13fd061-547c-5b7a-9771-e468b0559935", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "BitGrail exchange compromise — Nano (XRB / NANO) — 2017-10 to 2018-02-08 (disclosure)", "x_oak_date_prefix": "2018-02", "x_oak_attribution": "confirmed", "external_references": [ { "source_name": "oak", "external_id": "2018-02-bitgrail", "url": "https://onchainattack.org/document/examples/2018-02-bitgrail/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--daeee87a-dae4-527c-a825-f899bb522a87", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Binance API-key phishing campaign — Binance (CEX) — 2018-03-07", "x_oak_date_prefix": "2018-03", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2018-03-binance-api-phishing", "url": "https://onchainattack.org/document/examples/2018-03-binance-api-phishing/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--75668c80-867b-5962-ab68-1dc279fa8ee2", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Bithumb exchange hack — Multi-asset (BTC, ETH, XRP, others) — 2018-06-20", "x_oak_date_prefix": "2018-06", "x_oak_attribution": "inferred-strong", "external_references": [ { "source_name": "oak", "external_id": "2018-06-bithumb", "url": "https://onchainattack.org/document/examples/2018-06-bithumb/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--d76bd295-1f1b-5d4c-96d0-0118bb44b90f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Coinrail exchange compromise — multi-asset (ERC-20 token portfolio) — 2018-06-09 / 2018-06-10", "x_oak_date_prefix": "2018-06", "x_oak_attribution": "inferred-strong", "external_references": [ { "source_name": "oak", "external_id": "2018-06-coinrail", "url": "https://onchainattack.org/document/examples/2018-06-coinrail/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--1bd13c7b-e367-534f-8f30-7c97ed9dc88a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Bancor — Ethereum DEX — 2018-07-09", "x_oak_date_prefix": "2018-07", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2018-07-bancor", "url": "https://onchainattack.org/document/examples/2018-07-bancor/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--406f8123-0df1-5247-873f-ce7f0f6f31cd", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Zaif exchange hack — Multi-asset (BTC, BCH, MONA) — 2018-09-14", "x_oak_date_prefix": "2018-09", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2018-09-zaif", "url": "https://onchainattack.org/document/examples/2018-09-zaif/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--bee0be06-3f60-51ba-a0f7-db093eecf6f3", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "APT43 / Kimsuky crypto-funded espionage — 2018–2025", "x_oak_date_prefix": "2018-20", "x_oak_attribution": "confirmed", "external_references": [ { "source_name": "oak", "external_id": "2018-2025-apt43-kimsuky-crypto-funded-espionage", "url": "https://onchainattack.org/document/examples/2018-2025-apt43-kimsuky-crypto-funded-espionage/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--02efd257-9e16-5569-997a-7f7c6e4fdd52", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "DPRK IT worker exchange account farming — 2018–2025", "x_oak_date_prefix": "2018-20", "x_oak_attribution": "confirmed", "external_references": [ { "source_name": "oak", "external_id": "2018-2025-dprk-it-worker-exchange-account-farming", "url": "https://onchainattack.org/document/examples/2018-2025-dprk-it-worker-exchange-account-farming/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--6e8d1acc-504f-5e4a-96ab-45c6a7b4ed74", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Iranian state-aligned financially-motivated cyber operations — 2018–2025", "x_oak_date_prefix": "2018-20", "x_oak_attribution": "confirmed", "external_references": [ { "source_name": "oak", "external_id": "2018-2025-iranian-cyber-operators-crypto-economy", "url": "https://onchainattack.org/document/examples/2018-2025-iranian-cyber-operators-crypto-economy/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--876b884b-ed50-552d-876f-d865ec63e0ff", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Welcome to Video Son Jong-woo cross-layer de-anonymization — 2018", "x_oak_date_prefix": "2018", "x_oak_attribution": "confirmed", "external_references": [ { "source_name": "oak", "external_id": "2018-welcome-to-video-son-jong-woo-cross-layer", "url": "https://onchainattack.org/document/examples/2018-welcome-to-video-son-jong-woo-cross-layer/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--b127904c-d06e-54f1-a8a6-1de75d582c36", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Cryptopia exchange sustained drain — Ethereum and ERC-20 tokens — 2019-01-14 to 2019-01-28", "x_oak_date_prefix": "2019-01", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2019-01-cryptopia", "url": "https://onchainattack.org/document/examples/2019-01-cryptopia/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--437c3ca5-8524-5cb9-998c-45ec6710e8f3", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "QuadrigaCX exchange collapse — multi-chain — 2019-01 to 2019-04", "x_oak_date_prefix": "2019-01", "x_oak_attribution": "confirmed", "external_references": [ { "source_name": "oak", "external_id": "2019-01-quadrigacx", "url": "https://onchainattack.org/document/examples/2019-01-quadrigacx/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--cd5e2009-3543-546c-8beb-db4d8dc3d387", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "DragonEx exchange compromise — multi-asset cross-chain — 2019-03-24", "x_oak_date_prefix": "2019-03", "x_oak_attribution": "inferred-strong", "external_references": [ { "source_name": "oak", "external_id": "2019-03-dragonex", "url": "https://onchainattack.org/document/examples/2019-03-dragonex/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--4854c5cb-5a65-5a49-80e4-2a66c5ab854b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Binance hot-wallet compromise — Bitcoin — 2019-05-07", "x_oak_date_prefix": "2019-05", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2019-05-binance-hot-wallet", "url": "https://onchainattack.org/document/examples/2019-05-binance-hot-wallet/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--0ffd7fac-382a-5140-9708-4d1d928d5a4c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Binance KYC data leak — Binance (CEX) via alleged third-party KYC vendor — 2019-08", "x_oak_date_prefix": "2019-06", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2019-06-binance-kyc-leak", "url": "https://onchainattack.org/document/examples/2019-06-binance-kyc-leak/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--8b64c7b0-18c1-5059-b378-1e049978d51c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "PlusToken (Plus Token) Ponzi — multi-chain — collapse 2019-06", "x_oak_date_prefix": "2019-06", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2019-06-plus-token", "url": "https://onchainattack.org/document/examples/2019-06-plus-token/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--e14ce737-60a2-58f2-91b9-b9aca3850eda", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Bitpoint exchange hack — Multi-asset (BTC, ETH, XRP, LTC, BCH) — 2019-07-11", "x_oak_date_prefix": "2019-07", "x_oak_attribution": "confirmed", "external_references": [ { "source_name": "oak", "external_id": "2019-07-bitpoint", "url": "https://onchainattack.org/document/examples/2019-07-bitpoint/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--195d716d-7c52-55aa-bf2f-109a8e26815e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Wallet.fail Trezor / Ledger Hardware-Wallet Attacks — 35C3 — 2018-12-27", "x_oak_date_prefix": "2019-08", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2019-08-wallet-fail-trezor-keepkey-35c3-disclosure", "url": "https://onchainattack.org/document/examples/2019-08-wallet-fail-trezor-keepkey-35c3-disclosure/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--6c06afe7-9a91-5d39-8435-db135d4713d6", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Upbit exchange hack — Ethereum — 2019-11-27", "x_oak_date_prefix": "2019-11", "x_oak_attribution": "confirmed", "external_references": [ { "source_name": "oak", "external_id": "2019-11-upbit", "url": "https://onchainattack.org/document/examples/2019-11-upbit/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--91488b6d-a910-5f49-a860-3fcdc9419190", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Crypto Exchange Orderbook Spoofing and Wash-Trading Cohort — 2019–2025", "x_oak_date_prefix": "2019-20", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2019-2025-crypto-exchange-orderbook-spoofing-wash-trading-cohort", "url": "https://onchainattack.org/document/examples/2019-2025-crypto-exchange-orderbook-spoofing-wash-trading-cohort/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--4de66e3a-6bb2-5a46-8a7c-f8eab9b7ed4f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Trezor One / Model T RDP-downgrade voltage-glitch seed extraction (Kraken Security Labs disclosure) — hardware wallets — 2020-01-31", "x_oak_date_prefix": "2020-01", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2020-01-trezor-kraken-rdp-downgrade", "url": "https://onchainattack.org/document/examples/2020-01-trezor-kraken-rdp-downgrade/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--4455d0a4-505b-528a-b1e8-2f4c81fa1db3", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "bZx Protocol flash-loan-funded exploits — Ethereum — 2020-02-15 and 2020-02-18", "x_oak_date_prefix": "2020-02", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2020-02-bzx", "url": "https://onchainattack.org/document/examples/2020-02-bzx/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--2288fe6a-c85b-534e-87c7-27a34668ec66", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "MakerDAO Black Thursday liquidation-cascade zero-bid auctions — Ethereum — 2020-03-12", "x_oak_date_prefix": "2020-03", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2020-03-makerdao-black-thursday", "url": "https://onchainattack.org/document/examples/2020-03-makerdao-black-thursday/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--c0268879-d2e8-550c-a92c-de71b4795273", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Lendf.me reentrancy via ERC-777 callback chain — Ethereum — 2020-04-19", "x_oak_date_prefix": "2020-04", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2020-04-lendf-me", "url": "https://onchainattack.org/document/examples/2020-04-lendf-me/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--46194957-6e12-5bc3-be76-74b83e229914", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Bancor v0.6 BancorNetwork exposed-approval vulnerability — Ethereum — 2020-06-18", "x_oak_date_prefix": "2020-06", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2020-06-bancor", "url": "https://onchainattack.org/document/examples/2020-06-bancor/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--417ecdad-6e8a-5344-9be5-1f7108bce5b7", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Evil Corp WastedLocker ransomware — Garmin incident — 2020-07", "x_oak_date_prefix": "2020-07", "x_oak_attribution": "confirmed", "external_references": [ { "source_name": "oak", "external_id": "2020-07-garmin-wastedlocker-evil-corp", "url": "https://onchainattack.org/document/examples/2020-07-garmin-wastedlocker-evil-corp/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--8bc36d96-8f14-5b0a-bb33-b418f9864913", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Ledger customer-data breach and follow-on phishing campaign — e-commerce / multi-chain — 2020-06 (disclosed 2020-07, dumped 2020-12)", "x_oak_date_prefix": "2020-07", "x_oak_attribution": "confirmed", "external_references": [ { "source_name": "oak", "external_id": "2020-07-ledger-data-breach", "url": "https://onchainattack.org/document/examples/2020-07-ledger-data-breach/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--e8e4f9e9-8a2e-5768-aea9-e77600d4fee8", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Twitter internal-tool compromise and Bitcoin scam campaign — 2020-07-15", "x_oak_date_prefix": "2020-07", "x_oak_attribution": "confirmed", "external_references": [ { "source_name": "oak", "external_id": "2020-07-twitter-hack", "url": "https://onchainattack.org/document/examples/2020-07-twitter-hack/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--326f10ab-6d4e-5c63-81f7-afa83c1a973f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Yam Finance rebase-bug governance lockup — Ethereum — 2020-08-12 to 2020-08-13", "x_oak_date_prefix": "2020-08", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2020-08-yam-finance", "url": "https://onchainattack.org/document/examples/2020-08-yam-finance/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--3361cafe-8290-5339-9e1a-979760aa5466", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Eminence DeFi flash-loan exploit — Ethereum — 2020-09-28 to 2020-09-29", "x_oak_date_prefix": "2020-09", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2020-09-eminence-defi-flash-loan-exploit", "url": "https://onchainattack.org/document/examples/2020-09-eminence-defi-flash-loan-exploit/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--9e09315f-14a3-5ed5-b0bf-0457a174c436", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "KuCoin exchange hot-wallet theft — multi-chain — 2020-09-25", "x_oak_date_prefix": "2020-09", "x_oak_attribution": "inferred-strong", "external_references": [ { "source_name": "oak", "external_id": "2020-09-kucoin", "url": "https://onchainattack.org/document/examples/2020-09-kucoin/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--816331ca-e049-5853-a31a-a662fd97b5cf", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "SushiSwap dev-fund T5.005 + vampire-attack launch — Ethereum — 2020-08-26 to 2020-09-11", "x_oak_date_prefix": "2020-09", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2020-09-sushiswap-chef-nomi", "url": "https://onchainattack.org/document/examples/2020-09-sushiswap-chef-nomi/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--975ee904-35de-59e6-8043-059d6c54a0b6", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Yfdexf.Finance liquidity-mining exit scam — Ethereum — 2020-09-08 to 2020-09-09", "x_oak_date_prefix": "2020-09", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2020-09-yfdexf-finance-exit-scam", "url": "https://onchainattack.org/document/examples/2020-09-yfdexf-finance-exit-scam/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--5f0fc2e5-bf24-5fe8-b150-2904acd9c24a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Harvest Finance flash-loan-funded oracle manipulation — Ethereum — 2020-10-26", "x_oak_date_prefix": "2020-10", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2020-10-harvest-finance", "url": "https://onchainattack.org/document/examples/2020-10-harvest-finance/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--d2d01a0a-ff8b-5be1-aebc-fb2faf53bc12", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "UniCats yield-farm approval backdoor — Ethereum — 2020-10-05", "x_oak_date_prefix": "2020-10", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2020-10-unicats", "url": "https://onchainattack.org/document/examples/2020-10-unicats/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--cb888f4c-932a-597b-813c-f664dccf5fed", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Akropolis Delphi flash-loan-funded reentrancy — Ethereum — 2020-11-12", "x_oak_date_prefix": "2020-11", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2020-11-akropolis", "url": "https://onchainattack.org/document/examples/2020-11-akropolis/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--ba6dd1fa-4b5e-52f9-a91a-c0a8e2ad6b74", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Cred Inc. custodial-fraud / counterparty-risk insolvency — multi-chain (custodial) — 2020-11-07", "x_oak_date_prefix": "2020-11", "x_oak_attribution": "confirmed", "external_references": [ { "source_name": "oak", "external_id": "2020-11-cred", "url": "https://onchainattack.org/document/examples/2020-11-cred/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--8c3fb1a1-1e26-5f12-a7ad-c7fdb8579c35", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Origin Dollar (OUSD) flash-loan-funded reentrancy — Ethereum — 2020-11-17", "x_oak_date_prefix": "2020-11", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2020-11-origin-dollar", "url": "https://onchainattack.org/document/examples/2020-11-origin-dollar/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--651d754b-a594-5003-af93-edfac0d21b78", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Pickle Finance \"Evil Jar\" exploit — the controller swapped between any two \"jars\" the caller named, including fake ones — Ethereum — 2020-11-21", "x_oak_date_prefix": "2020-11", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2020-11-pickle-finance", "url": "https://onchainattack.org/document/examples/2020-11-pickle-finance/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--72b0eb17-bc40-5637-88e2-7ea0256390b4", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Compounder Finance strategy-swap LP drain — Ethereum — 2020-11-30 to 2020-12-02", "x_oak_date_prefix": "2020-12", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2020-12-compounder-finance", "url": "https://onchainattack.org/document/examples/2020-12-compounder-finance/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--b131a12d-8706-53f9-8dcf-93f6b588f7b6", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Cover Protocol Blacksmith infinite-mint exploit — Ethereum — 2020-12-28", "x_oak_date_prefix": "2020-12", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2020-12-cover-protocol-blacksmith-mint", "url": "https://onchainattack.org/document/examples/2020-12-cover-protocol-blacksmith-mint/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--dea77171-fc99-559a-97d7-8f63587f0762", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Livecoin exchange infrastructure seizure and rate manipulation — multi-asset (CEX) — 2020-12-23", "x_oak_date_prefix": "2020-12", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2020-12-livecoin", "url": "https://onchainattack.org/document/examples/2020-12-livecoin/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--0915f209-beb9-58ae-b0b2-1a4a6b9fbd38", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Warp Finance flash-loan oracle exploit — Ethereum — 2020-12-17", "x_oak_date_prefix": "2020-12", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2020-12-warp-finance", "url": "https://onchainattack.org/document/examples/2020-12-warp-finance/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--aa398960-58de-542f-a3bd-11b41dba3986", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "DeFi \"move fast\" era timelock-free protocol upgrade cohort — EVM — 2020–2021", "x_oak_date_prefix": "2020-20", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2020-2021-defi-timelock-free-upgrade-cohort", "url": "https://onchainattack.org/document/examples/2020-2021-defi-timelock-free-upgrade-cohort/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--adf447b8-da70-5bca-82b7-cb56a8a31ca3", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Lazarus Group — $200M Fiat Cash-Out from 25+ Hacks — 2020-2023", "x_oak_date_prefix": "2020-20", "x_oak_attribution": "confirmed", "external_references": [ { "source_name": "oak", "external_id": "2020-2023-lazarus-group-200m-laundering", "url": "https://onchainattack.org/document/examples/2020-2023-lazarus-group-200m-laundering/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--1b6da42f-dd14-54ab-85c8-116e843c5953", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Landmark Ransomware Extortion Cohort — 2020–2024 — 12 Incidents", "x_oak_date_prefix": "2020-20", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2020-2024-ransomware-extortion-landmark-cohort", "url": "https://onchainattack.org/document/examples/2020-2024-ransomware-extortion-landmark-cohort/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--5695a8b2-1dbe-5626-8eb6-4e23f01bd9ea", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Furucombo proxy-authority exploit — Ethereum — 2021-02-27", "x_oak_date_prefix": "2021-02", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2021-02-furucombo", "url": "https://onchainattack.org/document/examples/2021-02-furucombo/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--3cc23fd5-148a-56fe-b63e-7c821478db63", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "McAfee / Watson digital-asset pump-and-dump CFTC + DOJ enforcement — multi-CEX (Twitter-amplified) — 2017-12 / 2018-01 conduct; charges 2021-03-05", "x_oak_date_prefix": "2021-03", "x_oak_attribution": "confirmed", "external_references": [ { "source_name": "oak", "external_id": "2021-03-mcafee-cftc-pump-dump", "url": "https://onchainattack.org/document/examples/2021-03-mcafee-cftc-pump-dump/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--8ab74637-4e95-586f-b9bf-6ef174aadda2", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Meerkat Finance deployer-drain exit scam — BSC — 2021-03-04", "x_oak_date_prefix": "2021-03", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2021-03-meerkat-finance", "url": "https://onchainattack.org/document/examples/2021-03-meerkat-finance/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--36b269cd-6ab9-5fbd-948e-117a5002226c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "SafeMoon (SFM) token-launch mechanics — BNB Chain — 2021-03", "x_oak_date_prefix": "2021-03", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2021-03-safemoon", "url": "https://onchainattack.org/document/examples/2021-03-safemoon/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--59b8f56f-3395-522b-bf7b-4e8d0d3c412a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "True Seigniorage Dollar (TSD) hostile-vote mint flooding — Binance Smart Chain — 2021-03-13", "x_oak_date_prefix": "2021-03", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2021-03-true-seigniorage-dollar", "url": "https://onchainattack.org/document/examples/2021-03-true-seigniorage-dollar/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--55345874-bd04-5b42-ae89-b4cb47f8eb07", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "EasyFi admin-key compromise — Polygon — 2021-04-19", "x_oak_date_prefix": "2021-04", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2021-04-easyfi", "url": "https://onchainattack.org/document/examples/2021-04-easyfi/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--fc6cdda3-33f9-5d58-b2a1-a6dffa704921", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Uranium Finance migration-pair arithmetic error — BSC — 2021-04-28", "x_oak_date_prefix": "2021-04", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2021-04-uranium-finance", "url": "https://onchainattack.org/document/examples/2021-04-uranium-finance/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--392caf1f-8590-585e-bdd1-b9a365145119", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Bogged Finance flash-loan staking-reward mint exploit — BNB Chain — 2021-05 (reported 2021-05-24)", "x_oak_date_prefix": "2021-05", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2021-05-bogged-finance", "url": "https://onchainattack.org/document/examples/2021-05-bogged-finance/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--95cfe5ac-b917-5146-b6ad-e599f8e58e8a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Colonial Pipeline ransomware extortion payment — 2021-05", "x_oak_date_prefix": "2021-05", "x_oak_attribution": "confirmed", "external_references": [ { "source_name": "oak", "external_id": "2021-05-colonial-pipeline", "url": "https://onchainattack.org/document/examples/2021-05-colonial-pipeline/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--f97413dc-7449-56bb-b7bd-6dc14013c734", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "DFINITY Internet Computer (ICP) insider vesting-cliff token dump — Ethereum — 2021-05-10 onward", "x_oak_date_prefix": "2021-05", "x_oak_attribution": "inferred-strong", "external_references": [ { "source_name": "oak", "external_id": "2021-05-dfinity-icp-vesting-cliff-dump", "url": "https://onchainattack.org/document/examples/2021-05-dfinity-icp-vesting-cliff-dump/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--b042913e-4e3b-5b12-9120-ffad15fee53e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Meebits — the mint told you what you got before you had to keep it, and an archived attribute file told you what it was worth, so a contract minted and reverted until a rare one came out — Meebits / Larva Labs (Ethereum) — 2021-05-08", "x_oak_date_prefix": "2021-05", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2021-05-meebits-mint-outcome-reroll-rarity-exploit", "url": "https://onchainattack.org/document/examples/2021-05-meebits-mint-outcome-reroll-rarity-exploit/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--d2f35ee5-92bd-584c-ba06-e98b29116c73", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "PancakeBunny yield-aggregator mint-pricing exploit — BNB Smart Chain — 2021-05-19", "x_oak_date_prefix": "2021-05", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2021-05-pancake-bunny", "url": "https://onchainattack.org/document/examples/2021-05-pancake-bunny/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--90fdb17e-af56-5c23-80c9-af22b2093121", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Spartan Protocol AMM-LP-pricing exploit — BNB Smart Chain — 2021-05-02", "x_oak_date_prefix": "2021-05", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2021-05-spartan-protocol", "url": "https://onchainattack.org/document/examples/2021-05-spartan-protocol/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--b590fa86-2145-5657-8e37-0ed1fdb25b47", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Iron Finance (IRON / TITAN) — Polygon — collapse 2021-06-16", "x_oak_date_prefix": "2021-06", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2021-06-iron-finance", "url": "https://onchainattack.org/document/examples/2021-06-iron-finance/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--b9b53703-7be8-5990-812b-e0f0bffc4d84", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "StableMagnet — the explorer verified the contract but not the library it called, so the published source and the deployed behaviour were different programs — StableMagnet (SMAG) / BNB Chain — 2021-06-23", "x_oak_date_prefix": "2021-06", "x_oak_attribution": "inferred-strong", "external_references": [ { "source_name": "oak", "external_id": "2021-06-stablemagnet-unverified-linked-library-backdoor", "url": "https://onchainattack.org/document/examples/2021-06-stablemagnet-unverified-linked-library-backdoor/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--961ba7f6-892d-56d2-b740-1dc2b2ececeb", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "ChainSwap bridge unauthorised-mint exploit — multi-chain (Ethereum, BSC) — 2021-07-02 and 2021-07-11", "x_oak_date_prefix": "2021-07", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2021-07-chainswap", "url": "https://onchainattack.org/document/examples/2021-07-chainswap/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--0648aa77-84e2-563e-84a9-40edc5b38b56", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "THORChain — Bifröst module — 2021-07-15, 2021-07-23, 2021-08-12 (cluster)", "x_oak_date_prefix": "2021-07", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2021-07-thorchain", "url": "https://onchainattack.org/document/examples/2021-07-thorchain/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--ccb266e6-91c1-5c80-ac58-9a7322bf5f1e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Liquid Global warm-wallet compromise — multi-chain — 2021-08-19", "x_oak_date_prefix": "2021-08", "x_oak_attribution": "inferred-strong", "external_references": [ { "source_name": "oak", "external_id": "2021-08-liquid-global", "url": "https://onchainattack.org/document/examples/2021-08-liquid-global/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--6aa41ba8-b077-5bc4-a4c0-ca99acc171b2", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Poly Network — Cross-Chain Bridge — 2021-08-10", "x_oak_date_prefix": "2021-08", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2021-08-poly-network", "url": "https://onchainattack.org/document/examples/2021-08-poly-network/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--4f52be00-9c19-5e4d-8a46-90f280eba4f3", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Compound Comptroller distribution bug — Ethereum — 2021-09-30", "x_oak_date_prefix": "2021-09", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2021-09-compound", "url": "https://onchainattack.org/document/examples/2021-09-compound/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--25c75f7b-115d-5856-ba72-06da1bbc22cc", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Evolved Apes NFT rug pull — Ethereum — 2021-09-24 / 2021-10-05", "x_oak_date_prefix": "2021-09", "x_oak_attribution": "confirmed", "external_references": [ { "source_name": "oak", "external_id": "2021-09-evolved-apes", "url": "https://onchainattack.org/document/examples/2021-09-evolved-apes/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--29a6ed0e-caee-5bf7-97b4-ecb3b088ac43", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Vee Finance oracle manipulation — Avalanche — 2021-09-21", "x_oak_date_prefix": "2021-09", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2021-09-vee-finance", "url": "https://onchainattack.org/document/examples/2021-09-vee-finance/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--ebfdbb47-ac94-5462-a122-5174e6c53716", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "AnubisDAO (ANKH) — Ethereum — 2021-10-28 / 2021-10-29", "x_oak_date_prefix": "2021-10", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2021-10-anubisdao", "url": "https://onchainattack.org/document/examples/2021-10-anubisdao/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--cf232de7-b709-53a8-9f2f-b45dcf4c72b3", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Cream Finance oracle manipulation — Ethereum — 2021-10-27", "x_oak_date_prefix": "2021-10", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2021-10-cream-finance", "url": "https://onchainattack.org/document/examples/2021-10-cream-finance/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--053cd2a4-8b08-5f39-9213-1b4673012dd0", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "SQUID (Squid Game token) — BNB Chain — 2021-10 / 2021-11-01", "x_oak_date_prefix": "2021-11", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2021-11-squid", "url": "https://onchainattack.org/document/examples/2021-11-squid/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--44e20af0-2810-5a40-86d2-69fbfccbd05d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "AscendEX hot-wallet compromise — multi-chain (Ethereum, BSC, Polygon) — 2021-12-11", "x_oak_date_prefix": "2021-12", "x_oak_attribution": "inferred-strong", "external_references": [ { "source_name": "oak", "external_id": "2021-12-ascendex", "url": "https://onchainattack.org/document/examples/2021-12-ascendex/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--998cff56-85c9-5267-8029-37489ccbd668", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "BadgerDAO frontend compromise via Cloudflare Workers — Ethereum — 2021-12", "x_oak_date_prefix": "2021-12", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2021-12-badgerdao", "url": "https://onchainattack.org/document/examples/2021-12-badgerdao/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--d8f8ffad-f4cb-5720-957c-9fdacb3db23f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "BitMart hot-wallet compromise — Ethereum/BNB Chain — 2021-12-05", "x_oak_date_prefix": "2021-12", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2021-12-bitmart", "url": "https://onchainattack.org/document/examples/2021-12-bitmart/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--9c769832-3963-5e46-bb17-e738491dcd58", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Vulcan Forged wallet-server compromise — Polygon/Ethereum — December 2021", "x_oak_date_prefix": "2021-12", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2021-12-vulcan-forged", "url": "https://onchainattack.org/document/examples/2021-12-vulcan-forged/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--290062f6-beea-50fe-a71f-6811e5934d4e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Uranium Finance — Smart Contract Exploit / $31M Seized — 2021 / 2025-02", "x_oak_date_prefix": "2021-20", "x_oak_attribution": "confirmed", "external_references": [ { "source_name": "oak", "external_id": "2021-2023-uranium-finance-exploit-seizure", "url": "https://onchainattack.org/document/examples/2021-2023-uranium-finance-exploit-seizure/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--8f0ff76a-6f07-5f8f-a0ed-c858d785530f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Andariel Maui ransomware — healthcare-sector targeting — 2021–2024", "x_oak_date_prefix": "2021-20", "x_oak_attribution": "confirmed", "external_references": [ { "source_name": "oak", "external_id": "2021-2024-andariel-maui-ransomware-healthcare", "url": "https://onchainattack.org/document/examples/2021-2024-andariel-maui-ransomware-healthcare/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--e323e347-10a4-5f99-ad9c-129e5055733c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Magnate/Kokomo/Lendora/Solfire — Cross-Project Repeat Rug Pull Operation — 2021-2024", "x_oak_date_prefix": "2021-20", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2021-2024-magnate-kokomo-repeat-rug-pull-cluster", "url": "https://onchainattack.org/document/examples/2021-2024-magnate-kokomo-repeat-rug-pull-cluster/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--4f02b42e-cf1f-502e-8a44-b09aa6d21f88", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "2021–2024 Rekt.Uncovered Incidents Cohort", "x_oak_date_prefix": "2021-20", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2021-2024-rekt-uncovered-incidents-cohort", "url": "https://onchainattack.org/document/examples/2021-2024-rekt-uncovered-incidents-cohort/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--8b9faa1c-1574-588a-a36c-e3a03d918570", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "BlackByte Ransomware-as-a-Service — 2021–2025", "x_oak_date_prefix": "2021-20", "x_oak_attribution": "confirmed", "external_references": [ { "source_name": "oak", "external_id": "2021-2025-blackbyte-raas", "url": "https://onchainattack.org/document/examples/2021-2025-blackbyte-raas/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--2a441b71-be64-5318-8f90-fbf0b6da4367", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "DeFi and NFT Laundering-Infrastructure Cohort — 2021–2025", "x_oak_date_prefix": "2021-20", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2021-2025-defi-and-nft-laundering-infrastructure-cohort", "url": "https://onchainattack.org/document/examples/2021-2025-defi-and-nft-laundering-infrastructure-cohort/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--af3efffc-ed6b-5517-b584-4f315b5a9b26", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Governance Timelock Design Anti-Pattern Cohort — 2021–2025 — Amplification Factor Across Multiple Technique Classes", "x_oak_date_prefix": "2021-20", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2021-2025-governance-timelock-design-anti-pattern-cohort", "url": "https://onchainattack.org/document/examples/2021-2025-governance-timelock-design-anti-pattern-cohort/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--842940b8-69f2-5668-9b4d-929540d2868d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Initial-Liquidity Backdoor and Locked-Liquidity Spoof Cohort — 2021–2025 — Aggregate $100M+", "x_oak_date_prefix": "2021-20", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2021-2025-initial-liquidity-backdoor-and-lock-spoof-cohort", "url": "https://onchainattack.org/document/examples/2021-2025-initial-liquidity-backdoor-and-lock-spoof-cohort/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--e8c6a391-2d17-5921-b9c7-82daaa273cf9", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Karakurt encryption-free data-theft extortion operation — 2021–2025", "x_oak_date_prefix": "2021-20", "x_oak_attribution": "confirmed", "external_references": [ { "source_name": "oak", "external_id": "2021-2025-karakurt-data-extortion", "url": "https://onchainattack.org/document/examples/2021-2025-karakurt-data-extortion/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--8fe1f01c-a6d9-59b8-a829-a2dea80edc3f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Multi-block MEV TWAP oracle manipulation cohort — EVM — 2021–2025", "x_oak_date_prefix": "2021-20", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2021-2025-multi-block-mev-twap-cohort", "url": "https://onchainattack.org/document/examples/2021-2025-multi-block-mev-twap-cohort/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--d290a4ba-0f5d-59ae-9c04-3ed929acf4c3", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Slippage-manipulation sandwich MEV cohort — EVM (primary), Solana — 2021–2025", "x_oak_date_prefix": "2021-20", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2021-2025-slippage-manipulation-sandwich-cohort", "url": "https://onchainattack.org/document/examples/2021-2025-slippage-manipulation-sandwich-cohort/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--d29690f6-ce75-5258-ae64-32a0f9701ade", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Fake Audit Claims and Audit-Pending Marketing Cohort — 2021–2026 — Aggregate ~$50M+", "x_oak_date_prefix": "2021-20", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2021-2026-fake-audit-claims-and-audit-pending-marketing-cohort", "url": "https://onchainattack.org/document/examples/2021-2026-fake-audit-claims-and-audit-pending-marketing-cohort/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--903380b6-4836-5c4d-a7df-83e8df646ace", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Influencer-amplified non-memecoin promotion-and-dump cohort — multi-chain — 2021 onward (multi-year cohort)", "x_oak_date_prefix": "2021-20", "x_oak_attribution": "mixed", "external_references": [ { "source_name": "oak", "external_id": "2021-2026-influencer-amplified-non-memecoin-rug-cohort", "url": "https://onchainattack.org/document/examples/2021-2026-influencer-amplified-non-memecoin-rug-cohort/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--4988d413-6566-5ccd-afcf-da978a2c73f7", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Vesting-Cliff Dump and Brand-Impersonation Custodial Soft-Rug Cohort — 2021–2026", "x_oak_date_prefix": "2021-20", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2021-2026-vesting-cliff-dump-and-brand-impersonation-custodial-soft-rug-cohort", "url": "https://onchainattack.org/document/examples/2021-2026-vesting-cliff-dump-and-brand-impersonation-custodial-soft-rug-cohort/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--17141912-47cc-50eb-9b54-8de7930852a9", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Bitcoin Fog Roman Sterlingov exchange-funding de-anonymization — 2021", "x_oak_date_prefix": "2021", "x_oak_attribution": "confirmed", "external_references": [ { "source_name": "oak", "external_id": "2021-bitcoin-fog-sterlingov-exchange-funding", "url": "https://onchainattack.org/document/examples/2021-bitcoin-fog-sterlingov-exchange-funding/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--21bc11ea-3277-5c4d-b9a2-cbd0ae72416c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Arbix Finance audit-scope-mismatch rug pull — Binance Smart Chain — 2022-01-04", "x_oak_date_prefix": "2022-01", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2022-01-arbix-finance", "url": "https://onchainattack.org/document/examples/2022-01-arbix-finance/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--3cbc99ef-568b-56c7-9951-b50a43fdaadc", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Big Daddy Ape Club NFT rug pull — Solana — 2022-01-11", "x_oak_date_prefix": "2022-01", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2022-01-big-daddy-ape-club", "url": "https://onchainattack.org/document/examples/2022-01-big-daddy-ape-club/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--c950f109-dfc6-5cda-ac46-cd69b56d2cb6", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Frosties NFT rug pull — Solana — 2022-01-09", "x_oak_date_prefix": "2022-01", "x_oak_attribution": "confirmed", "external_references": [ { "source_name": "oak", "external_id": "2022-01-frosties", "url": "https://onchainattack.org/document/examples/2022-01-frosties/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--06fb0c7e-ec99-50ac-a305-4235f73e066f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "LooksRare wash-trading launch incentive — Ethereum — 2022-01-10 onward", "x_oak_date_prefix": "2022-01", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2022-01-looksrare-wash-trading-launch", "url": "https://onchainattack.org/document/examples/2022-01-looksrare-wash-trading-launch/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--4a5f9fda-1682-5618-bd05-5ba947ba00dc", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "LooksRare / X2Y2 wash-trading reward-farming cohort — Ethereum — 2022", "x_oak_date_prefix": "2022-01", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2022-01-looksrare-x2y2-wash-trading-cohort", "url": "https://onchainattack.org/document/examples/2022-01-looksrare-x2y2-wash-trading-cohort/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--9bc5da62-86f5-5a8a-a012-d1256c3d0b37", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Qubit Bridge — BNB Smart Chain ↔ Ethereum — 2022-01-27", "x_oak_date_prefix": "2022-01", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2022-01-qubit-bridge", "url": "https://onchainattack.org/document/examples/2022-01-qubit-bridge/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--b8c4dfaa-4b2f-5ae6-9794-405f59a30637", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Wonderland Money — concealed-pseudonym treasury operator (Sifu / Michael Patryn) — Avalanche / multi-chain — 2022-01-27", "x_oak_date_prefix": "2022-01", "x_oak_attribution": "inferred-strong", "external_references": [ { "source_name": "oak", "external_id": "2022-01-wonderland-sifu-patryn", "url": "https://onchainattack.org/document/examples/2022-01-wonderland-sifu-patryn/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--5749e28e-b860-5a6d-a3bf-58816729426f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Build Finance DAO hostile-takeover — Ethereum — 2022-02-09 to 2022-02-14", "x_oak_date_prefix": "2022-02", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2022-02-build-finance-dao", "url": "https://onchainattack.org/document/examples/2022-02-build-finance-dao/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--4a7fff1c-be3a-5b49-8536-477ba7f47c26", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Meter.io Passport Bridge — Ethereum ↔ BNB Smart Chain ↔ Moonriver — 2022-02-05", "x_oak_date_prefix": "2022-02", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2022-02-meter-bridge", "url": "https://onchainattack.org/document/examples/2022-02-meter-bridge/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--7cdf5535-575e-570f-b881-eb99e8cc22f0", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Wormhole Bridge — Ethereum ↔ Solana — 2022-02-02", "x_oak_date_prefix": "2022-02", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2022-02-wormhole", "url": "https://onchainattack.org/document/examples/2022-02-wormhole/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--2a05a27c-02e3-5759-a1ca-128278fb0860", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "X2Y2 marketplace-incentive wash-trade cohort — Ethereum — 2022-02 onward", "x_oak_date_prefix": "2022-02", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2022-02-x2y2-marketplace-incentive-wash-cohort", "url": "https://onchainattack.org/document/examples/2022-02-x2y2-marketplace-incentive-wash-cohort/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--b069a759-180a-5a08-a7a0-466eb58d553a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Agave / Hundred Finance reentrancy exploit — Gnosis Chain — 2022-03-15", "x_oak_date_prefix": "2022-03", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2022-03-agave", "url": "https://onchainattack.org/document/examples/2022-03-agave/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--485b9541-68f8-50f2-bd33-fb55301e92c9", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "BSC yield-farm single-sided liquidity-plant cohort — Binance Smart Chain — 2022-Q1 through 2022-Q3", "x_oak_date_prefix": "2022-03", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2022-03-bsc-yield-farm-liquidity-plant-cohort", "url": "https://onchainattack.org/document/examples/2022-03-bsc-yield-farm-liquidity-plant-cohort/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--8dd35f8e-c9ee-5ab1-a5f3-f90d4dcec916", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Cashio infinite-mint via missing input validation — Solana — 2022-03-23", "x_oak_date_prefix": "2022-03", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2022-03-cashio", "url": "https://onchainattack.org/document/examples/2022-03-cashio/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--c035d017-ebd4-5174-a741-fd10134b4071", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Paraluni MasterChef reentrancy exploit — BNB Chain — 2022-03-13", "x_oak_date_prefix": "2022-03", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2022-03-paraluni", "url": "https://onchainattack.org/document/examples/2022-03-paraluni/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--8d4706bf-2f58-5775-9c2a-f9835fc03a26", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Ronin Bridge — Ethereum ↔ Ronin sidechain — 2022-03-23", "x_oak_date_prefix": "2022-03", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2022-03-ronin-bridge", "url": "https://onchainattack.org/document/examples/2022-03-ronin-bridge/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--0c3e6654-9b29-582b-9091-7628b1f30037", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Beanstalk Farms flash-loan governance attack — Ethereum — 2022-04-17", "x_oak_date_prefix": "2022-04", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2022-04-beanstalk", "url": "https://onchainattack.org/document/examples/2022-04-beanstalk/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--0887b044-cc60-5095-860f-75c6bbd80fab", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Bored Ape Yacht Club / Yuga Labs operator-side credential-compromise wave — Ethereum — 2022-04 → 2024-08", "x_oak_date_prefix": "2022-04", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2022-04-bored-ape-discord-wave", "url": "https://onchainattack.org/document/examples/2022-04-bored-ape-discord-wave/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--cd47fab3-e626-54a4-ad27-4e4d2da3ad16", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "iCloud-backup MetaMask seed-phrase cohort — multi-chain (EVM-dominant) — 2022-04 (canonical Iacovone case) onward", "x_oak_date_prefix": "2022-04", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2022-04-icloud-metamask-seed-phrase-cohort", "url": "https://onchainattack.org/document/examples/2022-04-icloud-metamask-seed-phrase-cohort/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--68ee177f-50ee-5855-a84b-3112e3c2bda7", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Inverse Finance TWAP-oracle lending exploit — Ethereum — 2022-04-02", "x_oak_date_prefix": "2022-04", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2022-04-inverse-finance-twap", "url": "https://onchainattack.org/document/examples/2022-04-inverse-finance-twap/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--8519075b-67a5-57d8-81fd-47d460e6c52d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Inverse Finance recurring oracle exploits — Ethereum — 2022-04-02 and 2022-06-16", "x_oak_date_prefix": "2022-04", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2022-04-inverse-finance", "url": "https://onchainattack.org/document/examples/2022-04-inverse-finance/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--47cc36df-bf8a-5d43-93d0-7683fb113351", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Ronin Bridge Discord-impersonation followups — Axie Infinity / Ronin community — 2022-04 (cohort)", "x_oak_date_prefix": "2022-04", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2022-04-ronin-discord", "url": "https://onchainattack.org/document/examples/2022-04-ronin-discord/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--8c40f0bf-5128-5d1c-a360-5fba3c5cdf07", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Saddle Finance virtual-price manipulation — Ethereum — 2022-04-30", "x_oak_date_prefix": "2022-04", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2022-04-saddle-finance", "url": "https://onchainattack.org/document/examples/2022-04-saddle-finance/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--67436aad-dba4-5ffd-9383-07bb1e4a0fdc", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Fortress Protocol flash-loan governance attack — BNB Chain — 2022-05-08", "x_oak_date_prefix": "2022-05", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2022-05-fortress-protocol-flash-loan-governance-attack", "url": "https://onchainattack.org/document/examples/2022-05-fortress-protocol-flash-loan-governance-attack/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--bfdfbbc5-056d-5b8f-8b1e-83214db4944c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Pixelmon NFT reveal-rug — Ethereum — 2022-02 mint, 2022-05 reveal", "x_oak_date_prefix": "2022-05", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2022-05-pixelmon-reveal", "url": "https://onchainattack.org/document/examples/2022-05-pixelmon-reveal/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--80a02103-a736-5251-8aab-17f991d1dba6", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Terra/Luna / UST algorithmic-stablecoin collapse — Terra — 2022-05-07 to 2022-05-13", "x_oak_date_prefix": "2022-05", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2022-05-terra-luna-collapse", "url": "https://onchainattack.org/document/examples/2022-05-terra-luna-collapse/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--fc8bca75-0079-5ce1-b9cc-136d32d48695", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Harmony Horizon Bridge light-client verification economic-security gap — Ethereum / Harmony — 2022-06-23/24", "x_oak_date_prefix": "2022-06", "x_oak_attribution": "confirmed", "external_references": [ { "source_name": "oak", "external_id": "2022-06-harmony-horizon-bridge", "url": "https://onchainattack.org/document/examples/2022-06-harmony-horizon-bridge/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--242b01ad-749c-5300-8a06-d79475df8346", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Lido stETH depeg and Aave / Curve looped-leverage liquidation cascade — Ethereum L1 — 2022-05 to 2022-06", "x_oak_date_prefix": "2022-06", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2022-06-lido-steth-depeg", "url": "https://onchainattack.org/document/examples/2022-06-lido-steth-depeg/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--e1105a10-1ab6-57b0-b10a-18d1fc49db49", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "OpenSea insider trading — Nate Chastain — Ethereum — 2021-09 to 2022-06", "x_oak_date_prefix": "2022-06", "x_oak_attribution": "confirmed", "external_references": [ { "source_name": "oak", "external_id": "2022-06-opensea-insider-trading", "url": "https://onchainattack.org/document/examples/2022-06-opensea-insider-trading/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--5d4341ed-51ad-508c-9881-7a979c9a62e0", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "XCarnival — the borrow path checked that a pledge order existed, never that the Ape was still in the vault, so one BAYC backed loan after loan — XCarnival (Ethereum) — 2022-06-26/27", "x_oak_date_prefix": "2022-06", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2022-06-xcarnival-withdrawn-nft-collateral-order-reuse", "url": "https://onchainattack.org/document/examples/2022-06-xcarnival-withdrawn-nft-collateral-order-reuse/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--6dc851e3-e0f2-52be-9924-da3846160d0d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Audius governance storage-collision attack — Ethereum — 2022-07-23", "x_oak_date_prefix": "2022-07", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2022-07-audius", "url": "https://onchainattack.org/document/examples/2022-07-audius/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--2ce56ad5-fec7-594d-9cc1-33013de412c1", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Crema Finance fake-tick-array exploit — Solana — 2022-07-02", "x_oak_date_prefix": "2022-07", "x_oak_attribution": "confirmed", "external_references": [ { "source_name": "oak", "external_id": "2022-07-crema-finance", "url": "https://onchainattack.org/document/examples/2022-07-crema-finance/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--b8b55d63-70a9-5c01-8632-15caf08c9bdf", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Li.Fi v1 diamond-facet vulnerability — EVM — 2022-07", "x_oak_date_prefix": "2022-07", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2022-07-li-fi-v1-diamond-facet-exploit", "url": "https://onchainattack.org/document/examples/2022-07-li-fi-v1-diamond-facet-exploit/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--e84c9322-98ac-5cf1-a261-81586611acc5", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Nirvana Finance flash-loan-driven price manipulation — Solana — 2022-07-28", "x_oak_date_prefix": "2022-07", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2022-07-nirvana-finance", "url": "https://onchainattack.org/document/examples/2022-07-nirvana-finance/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--dbf072e3-ef64-56cf-9d79-0ae9589bfd9f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Nomad optimistic bridge challenger-network gap — EVM — 2022 (architecture-review)", "x_oak_date_prefix": "2022-07", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2022-07-nomad-optimistic-verification-gap", "url": "https://onchainattack.org/document/examples/2022-07-nomad-optimistic-verification-gap/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--cbd4bb44-f33f-587c-9f7a-af1318514f15", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Omni Protocol — handing an NFT back with `safeTransferFrom` calls the borrower's code mid-transition, and two unguarded functions turned that callback into a double reentrancy — Omni Protocol (Ethereum) — 2022-07-10", "x_oak_date_prefix": "2022-07", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2022-07-omni-protocol-erc721-callback-double-reentrancy", "url": "https://onchainattack.org/document/examples/2022-07-omni-protocol-erc721-callback-double-reentrancy/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--2f90640f-21b6-542d-89f8-ffa547c82552", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Premint NFT-allowlist platform front-end JavaScript injection — Ethereum — 2022-07-17", "x_oak_date_prefix": "2022-07", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2022-07-premint-phishing", "url": "https://onchainattack.org/document/examples/2022-07-premint-phishing/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--c92f049b-e876-5f05-9caa-5ac83124a266", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Curve Finance frontend DNS hijack — Ethereum — 2022-08", "x_oak_date_prefix": "2022-08", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2022-08-curve-dns-hijack", "url": "https://onchainattack.org/document/examples/2022-08-curve-dns-hijack/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--2700103e-679f-5334-9160-4969d5e07bc7", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Nomad Bridge — Ethereum / Moonbeam / Avalanche / Evmos — 2022-08-01", "x_oak_date_prefix": "2022-08", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2022-08-nomad-bridge", "url": "https://onchainattack.org/document/examples/2022-08-nomad-bridge/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--f9f511df-ef42-5222-8e8d-d0d376c321e1", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "OptiFi accidental program closure — Solana — 2022-08-29", "x_oak_date_prefix": "2022-08", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2022-08-optifi", "url": "https://onchainattack.org/document/examples/2022-08-optifi/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--d8555ae2-6787-5768-9e76-66c79bd40862", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Slope Wallet (Solana) — 2022-08-02", "x_oak_date_prefix": "2022-08", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2022-08-slope-phantom", "url": "https://onchainattack.org/document/examples/2022-08-slope-phantom/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--e77919cd-d753-5948-954e-da85602f3e99", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Tornado Cash OFAC sanctions — trust-substrate shift via regulatory action — Ethereum — 2022-08-08", "x_oak_date_prefix": "2022-08", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2022-08-tornado-cash-ofac-sanctions", "url": "https://onchainattack.org/document/examples/2022-08-tornado-cash-ofac-sanctions/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--038a211b-7010-53d3-88f3-11db96897ab0", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Yuga Labs Otherside Discord-phishing wave — Ethereum + multi-chain — 2022-08-04", "x_oak_date_prefix": "2022-08", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2022-08-yuga-otherside", "url": "https://onchainattack.org/document/examples/2022-08-yuga-otherside/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--6f110e9d-e34f-5312-bbae-d77be31d11bf", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "CryptoFX / Mauricio Chavez fake-asset-manager Ponzi targeting Latino community — Houston, Texas + ten-state US footprint + two foreign countries — 2020-05 onward / SEC emergency action 2022-09", "x_oak_date_prefix": "2022-09", "x_oak_attribution": "confirmed", "external_references": [ { "source_name": "oak", "external_id": "2022-09-cryptofx-chavez", "url": "https://onchainattack.org/document/examples/2022-09-cryptofx-chavez/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--d2ad1c21-7dd8-5f07-8bc1-40af7e897547", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Profanity vanity-address cohort — Ethereum — 2022-09-15 to 2022-12 (cohort case)", "x_oak_date_prefix": "2022-09", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2022-09-wintermute-profanity-cohort", "url": "https://onchainattack.org/document/examples/2022-09-wintermute-profanity-cohort/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--ccb2a0de-9c93-5deb-9d22-7de9d765ebff", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Wintermute DeFi vault drain — Ethereum — 2022-09-20", "x_oak_date_prefix": "2022-09", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2022-09-wintermute", "url": "https://onchainattack.org/document/examples/2022-09-wintermute/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--ce899b61-f3c1-50bd-b064-5c5176f89969", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "BSC Token Hub (BNB Bridge) — Beacon Chain ↔ BSC — 2022-10-06", "x_oak_date_prefix": "2022-10", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2022-10-binance-bsc-bridge", "url": "https://onchainattack.org/document/examples/2022-10-binance-bsc-bridge/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--8832aca6-b363-5c66-bd6f-3372663c8ad0", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Mango Markets oracle manipulation — Solana — 2022-10-11", "x_oak_date_prefix": "2022-10", "x_oak_attribution": "confirmed", "external_references": [ { "source_name": "oak", "external_id": "2022-10-mango-markets", "url": "https://onchainattack.org/document/examples/2022-10-mango-markets/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--f22960d4-2fe1-5255-baf5-81da07924a0f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Market.xyz — a lending market prices Curve LP collateral through `get_virtual_price()` and is drained by re-entering the pool's view during `remove_liquidity` — Market.xyz / QuickSwap (Polygon) — 2022-10-24", "x_oak_date_prefix": "2022-10", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2022-10-market-xyz-curve-lp-oracle-read-only-reentrancy", "url": "https://onchainattack.org/document/examples/2022-10-market-xyz-curve-lp-oracle-read-only-reentrancy/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--f6f5530a-8ac8-5dcd-8409-793a890865fb", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Team Finance liquidity-locker `migrate()` exploit — Ethereum / BNB Chain — 2022-10-27", "x_oak_date_prefix": "2022-10", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2022-10-team-finance", "url": "https://onchainattack.org/document/examples/2022-10-team-finance/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--67a79f2e-46c4-5a56-9874-2b0cba04a369", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Transit Swap DEX aggregator exploit — Multi-chain (Ethereum, BNB Chain) — 2022-10-02", "x_oak_date_prefix": "2022-10", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2022-10-transit-swap", "url": "https://onchainattack.org/document/examples/2022-10-transit-swap/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--6ca6e8cf-552f-54b9-8ee4-fb6420da3c5e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "FTX exchange collapse — multi-chain (CEX) — 2022-11-11 (Chapter 11 filing)", "x_oak_date_prefix": "2022-11", "x_oak_attribution": "confirmed", "external_references": [ { "source_name": "oak", "external_id": "2022-11-ftx-collapse", "url": "https://onchainattack.org/document/examples/2022-11-ftx-collapse/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--fec2ffc1-fae3-59c8-8af7-a62dd5e6e36d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "X2Y2 + LooksRare royalty-optional shift — Ethereum — 2022-08 through 2023 (cohort case)", "x_oak_date_prefix": "2022-11", "x_oak_attribution": "confirmed", "external_references": [ { "source_name": "oak", "external_id": "2022-11-x2y2-looksrare-royalty-optional", "url": "https://onchainattack.org/document/examples/2022-11-x2y2-looksrare-royalty-optional/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--f3bad0dd-7245-5125-ba87-16c5713dc4e8", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Ankr deployer-key compromise and malicious upgrade — BNB Chain — 2022-12-01", "x_oak_date_prefix": "2022-12", "x_oak_attribution": "inferred-strong", "external_references": [ { "source_name": "oak", "external_id": "2022-12-ankr", "url": "https://onchainattack.org/document/examples/2022-12-ankr/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--3741fdc4-4085-5c57-af8d-b7121910563c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Defrost Finance exit scam — Avalanche — 2022-12-23", "x_oak_date_prefix": "2022-12", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2022-12-defrost-finance", "url": "https://onchainattack.org/document/examples/2022-12-defrost-finance/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--e342c714-e499-58c4-b7ff-31b8489e4763", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "LastPass encrypted-vault exfiltration → multi-year crypto-drain cohort — multi-chain — 2022-12 (breach) / 2023-2025 (drains)", "x_oak_date_prefix": "2022-12", "x_oak_attribution": "inferred-strong", "external_references": [ { "source_name": "oak", "external_id": "2022-12-lastpass-vault-cohort", "url": "https://onchainattack.org/document/examples/2022-12-lastpass-vault-cohort/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--b57d8c7a-ec0a-5231-90df-0b1a65682959", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Lido stETH staking-interface phishing cohort — Ethereum — 2022-2023", "x_oak_date_prefix": "2022-20", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2022-2023-lido-steth-staking-phishing-cohort", "url": "https://onchainattack.org/document/examples/2022-2023-lido-steth-staking-phishing-cohort/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--e9985aa6-f6dd-5980-a6fe-d632659bc179", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Black Basta Ransomware-as-a-Service — 2022–2024", "x_oak_date_prefix": "2022-20", "x_oak_attribution": "confirmed", "external_references": [ { "source_name": "oak", "external_id": "2022-2024-black-basta-raas", "url": "https://onchainattack.org/document/examples/2022-2024-black-basta-raas/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--8743ea93-325f-5499-8188-dc72e621d881", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Flash-Loan Governance Attack Cohort — 2022–2024 — Aggregate $200M+ Nominal, ~$190M+ Realised", "x_oak_date_prefix": "2022-20", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2022-2024-flash-loan-governance-attack-cohort", "url": "https://onchainattack.org/document/examples/2022-2024-flash-loan-governance-attack-cohort/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--7dd221ef-2752-51d9-ae94-90bd97b18063", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Snapshot off-chain voting exploitation via flash-loaned and delegated voting power — Ethereum — 2022–2024", "x_oak_date_prefix": "2022-20", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2022-2024-snapshot-voting-exploitation-cohort", "url": "https://onchainattack.org/document/examples/2022-2024-snapshot-voting-exploitation-cohort/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--4a39b080-d284-5fba-84df-76d3cd4a5d5b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Arbitrum One optimistic bridge validator-set gap — Ethereum / Arbitrum One — 2022–2025 (architecture-review)", "x_oak_date_prefix": "2022-20", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2022-2025-arbitrum-one-optimistic-bridge-validator-set-gap", "url": "https://onchainattack.org/document/examples/2022-2025-arbitrum-one-optimistic-bridge-validator-set-gap/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--ba44da4b-a3c2-5a3a-a332-6f4d9888b8bc", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Coinbase cbETH Structural Discount and Liquid Staking Token Pricing Surface — Ethereum — 2022–2025", "x_oak_date_prefix": "2022-20", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2022-2025-coinbase-cbeth-structural-discount", "url": "https://onchainattack.org/document/examples/2022-2025-coinbase-cbeth-structural-discount/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--bdbf64b0-3053-5ac8-84c2-22f08a816833", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Cosmos-SDK Validator Downtime Jailing and Slashing-Evasion Patterns — 2022–2025", "x_oak_date_prefix": "2022-20", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2022-2025-cosmos-validator-downtime-jailing-slashing-evasion", "url": "https://onchainattack.org/document/examples/2022-2025-cosmos-validator-downtime-jailing-slashing-evasion/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--6ffa2659-e4af-56f1-8f89-9143ef6c65c7", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Cross-chain locked-liquidity spoof cohort — multi-chain — 2022–2025 (cohort)", "x_oak_date_prefix": "2022-20", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2022-2025-cross-chain-lock-spoof-cohort", "url": "https://onchainattack.org/document/examples/2022-2025-cross-chain-lock-spoof-cohort/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--38745625-ef72-5f2f-842b-f58c9649b523", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Cross-Chain Locked-Liquidity and Token Metadata Spoofing Cohort — 2022–2025 — Aggregate $20M+", "x_oak_date_prefix": "2022-20", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2022-2025-cross-chain-locked-liquidity-and-token-metadata-spoofing-cohort", "url": "https://onchainattack.org/document/examples/2022-2025-cross-chain-locked-liquidity-and-token-metadata-spoofing-cohort/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--45b1ef51-6ff0-58fd-a859-1ffc7916b5fd", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Cross-chain replay vulnerability cohort — multi-chain — 2022–2025 (cohort)", "x_oak_date_prefix": "2022-20", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2022-2025-cross-chain-replay-cohort", "url": "https://onchainattack.org/document/examples/2022-2025-cross-chain-replay-cohort/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--1dce3175-135c-5cd8-a76b-206963214a9d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Custody Infrastructure Compromise Cohort — 2022–2025", "x_oak_date_prefix": "2022-20", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2022-2025-custody-infrastructure-compromise-cohort", "url": "https://onchainattack.org/document/examples/2022-2025-custody-infrastructure-compromise-cohort/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--f531814f-73ed-5f1a-a1e3-48a54d3831fb", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "DAO Governance Exploitation Cohort — 2022–2025 — Aggregate $30M+ Attempted, ~$8M Realised", "x_oak_date_prefix": "2022-20", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2022-2025-dao-governance-exploitation-cohort", "url": "https://onchainattack.org/document/examples/2022-2025-dao-governance-exploitation-cohort/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--4fc28c59-ea2f-54c1-a7e1-69783be006f3", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "ERC-20 transferFrom return-value spoofing cohort — EVM — 2022–2025", "x_oak_date_prefix": "2022-20", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2022-2025-erc20-transferfrom-return-value-spoofing-cohort", "url": "https://onchainattack.org/document/examples/2022-2025-erc20-transferfrom-return-value-spoofing-cohort/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--7706ae47-079d-5f98-ac31-2a238493ed48", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Ethereum Beacon Chain Inactivity-Leak Griefing and Correlation-Penalty Economics — 2022–2025", "x_oak_date_prefix": "2022-20", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2022-2025-ethereum-beacon-chain-inactivity-leak-griefing", "url": "https://onchainattack.org/document/examples/2022-2025-ethereum-beacon-chain-inactivity-leak-griefing/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--03a94469-81c4-58b2-bd89-95b0153d7f9c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Ethereum Block Builder Exclusive Order-Flow Centralization and Censorship — 2022–2025", "x_oak_date_prefix": "2022-20", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2022-2025-ethereum-block-builder-eof-centralization", "url": "https://onchainattack.org/document/examples/2022-2025-ethereum-block-builder-eof-centralization/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--5e795d96-47b8-52ff-b1ce-0f7b2b17c027", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Fake browser-extension phishing cohort — cross-chain — 2022–2025", "x_oak_date_prefix": "2022-20", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2022-2025-fake-browser-extension-phishing-cohort", "url": "https://onchainattack.org/document/examples/2022-2025-fake-browser-extension-phishing-cohort/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--aceb09f4-1552-5add-8730-cbc8dd99159f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "MEV-Boost Relay Bid Withholding and Builder Auction Gaming — Ethereum L1 — 2022–2025", "x_oak_date_prefix": "2022-20", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2022-2025-mev-boost-relay-bid-withholding-auction-gaming", "url": "https://onchainattack.org/document/examples/2022-2025-mev-boost-relay-bid-withholding-auction-gaming/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--71802f59-2e39-5a8f-b051-82281f38ccfc", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "MEV-Boost Relay Operator Trust-Surface and MEV Theft Risk — Ethereum — 2022–2025", "x_oak_date_prefix": "2022-20", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2022-2025-mev-boost-relay-operator-trust-surface", "url": "https://onchainattack.org/document/examples/2022-2025-mev-boost-relay-operator-trust-surface/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--d27ab417-d380-5956-98f6-b031de44abc5", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "NFT Marketplace Wash-Trading and Royalty-Bypass Infrastructure — 2022–2025 — Aggregate Revenue Loss in Hundreds of Millions", "x_oak_date_prefix": "2022-20", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2022-2025-nft-marketplace-wash-trading-and-royalty-bypass-infrastructure", "url": "https://onchainattack.org/document/examples/2022-2025-nft-marketplace-wash-trading-and-royalty-bypass-infrastructure/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--a6ce8272-4d19-5d0c-8004-dbe2050c3a1a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Optimistic-bridge fraud-proof gap cohort — multi-chain — 2022–2025 (cohort)", "x_oak_date_prefix": "2022-20", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2022-2025-optimistic-bridge-fraud-proof-cohort", "url": "https://onchainattack.org/document/examples/2022-2025-optimistic-bridge-fraud-proof-cohort/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--7f2bf8cd-8a10-5bd6-bcac-95f3e8f017b0", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Seed-Phrase At-Rest Exfiltration Cohort — 2022–2025", "x_oak_date_prefix": "2022-20", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2022-2025-seed-phrase-at-rest-exfiltration-cohort", "url": "https://onchainattack.org/document/examples/2022-2025-seed-phrase-at-rest-exfiltration-cohort/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--f27440d7-3a0c-552a-b00d-d3fe6b84c843", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Smart-Contract Architecture Exploit Cohort — 2022–2025", "x_oak_date_prefix": "2022-20", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2022-2025-smart-contract-architecture-exploit-cohort", "url": "https://onchainattack.org/document/examples/2022-2025-smart-contract-architecture-exploit-cohort/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--3f4d5329-a47d-5fed-a278-a61d2b251d9d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Social-Engineering Entry-Vector Cohort — 2022–2025", "x_oak_date_prefix": "2022-20", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2022-2025-social-engineering-entry-vector-cohort", "url": "https://onchainattack.org/document/examples/2022-2025-social-engineering-entry-vector-cohort/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--b6a7d003-e988-5f34-85b2-678ede161426", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Stablecoin Issuer Freeze-Asymmetry and Optimistic Bridge Fraud-Proof Gap Cohort — 2022–2025", "x_oak_date_prefix": "2022-20", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2022-2025-stablecoin-issuer-freeze-asymmetry-and-bridge-fraud-proof-gap-cohort", "url": "https://onchainattack.org/document/examples/2022-2025-stablecoin-issuer-freeze-asymmetry-and-bridge-fraud-proof-gap-cohort/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--7729d607-4174-5216-9d06-9b7a7f396952", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "OFAC-compliance builder censorship of Tornado Cash transactions — Ethereum — 2022–2025 (ongoing)", "x_oak_date_prefix": "2022-20", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2022-2025-tornado-cash-ofac-builder-censorship", "url": "https://onchainattack.org/document/examples/2022-2025-tornado-cash-ofac-builder-censorship/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--f72d17f8-727b-57fa-8d75-fbd220f7fad8", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Travel Rule Gap Exploitation — Sub-Threshold Structuring and VASP-Avoidant Routing — 2022–2025", "x_oak_date_prefix": "2022-20", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2022-2025-travel-rule-gap-exploitation", "url": "https://onchainattack.org/document/examples/2022-2025-travel-rule-gap-exploitation/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--c9a2ace6-a057-5a33-94d7-37dfec37e60a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Validator liveness-fault griefing cohort — Ethereum L1 (primary), Solana, Cosmos — 2022–2025", "x_oak_date_prefix": "2022-20", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2022-2025-validator-liveness-fault-griefing-cohort", "url": "https://onchainattack.org/document/examples/2022-2025-validator-liveness-fault-griefing-cohort/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--d7bd1e7b-4548-5588-83cf-5e4397d615f4", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Circle USDC — $420M+ Compliance Failures / Stablecoin Issuer Inaction — 2022-2026", "x_oak_date_prefix": "2022-20", "x_oak_attribution": "confirmed", "external_references": [ { "source_name": "oak", "external_id": "2022-2026-circle-usdc-compliance-failures", "url": "https://onchainattack.org/document/examples/2022-2026-circle-usdc-compliance-failures/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--edd662aa-44f1-5f6a-a364-5e02647634ac", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Hydra Marketplace German server-seizure takedown — 2022", "x_oak_date_prefix": "2022", "x_oak_attribution": "confirmed", "external_references": [ { "source_name": "oak", "external_id": "2022-hydra-marketplace-german-server-seizure", "url": "https://onchainattack.org/document/examples/2022-hydra-marketplace-german-server-seizure/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--06b4da57-f86a-5b6b-acc5-e801235ffd0b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Post-Tornado-Cash USDC/USDT freeze-policy asymmetry laundering — 2022", "x_oak_date_prefix": "2022", "x_oak_attribution": "confirmed", "external_references": [ { "source_name": "oak", "external_id": "2022-post-tornado-cash-usdc-usdt-freeze-asymmetry", "url": "https://onchainattack.org/document/examples/2022-post-tornado-cash-usdc-usdt-freeze-asymmetry/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--6a748289-55a7-511f-abf0-14facedb5daf", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Magic Eden y00ts indexer-bug counterfeit-listing exploit — Solana — 2023-01-04", "x_oak_date_prefix": "2023-01", "x_oak_attribution": "confirmed", "external_references": [ { "source_name": "oak", "external_id": "2023-01-magic-eden-y00ts", "url": "https://onchainattack.org/document/examples/2023-01-magic-eden-y00ts/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--3f9ca81a-6e4e-5079-a643-486cef00457f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Blur airdrop incentive-wash cohort — Ethereum — 2022-10-19 through 2024 (cohort case)", "x_oak_date_prefix": "2023-02", "x_oak_attribution": "inferred-strong", "external_references": [ { "source_name": "oak", "external_id": "2023-02-blur-airdrop-wash-cohort", "url": "https://onchainattack.org/document/examples/2023-02-blur-airdrop-wash-cohort/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--f2271c2c-bc9a-595f-9ba8-b1663b42fb08", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "BonqDAO Tellor oracle manipulation — Polygon — 2023-02-01", "x_oak_date_prefix": "2023-02", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2023-02-bonqdao", "url": "https://onchainattack.org/document/examples/2023-02-bonqdao/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--405cfb77-e410-5160-9c44-8300f16c565a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Hope Finance router-rerouting rug pull — Arbitrum — 2023-02-21", "x_oak_date_prefix": "2023-02", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2023-02-hopefinance", "url": "https://onchainattack.org/document/examples/2023-02-hopefinance/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--e904f9cd-4cba-5117-928f-fdca9391ffb0", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "`jaredfromsubway.eth` sandwich-MEV operator — Ethereum — operating since 2023-02-27", "x_oak_date_prefix": "2023-02", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2023-02-jaredfromsubway-mev", "url": "https://onchainattack.org/document/examples/2023-02-jaredfromsubway-mev/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--5a58cfa5-ea51-5b39-a6c9-47044996c901", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "MetaBirkins (Hermès vs Mason Rothschild) — Ethereum + civil-court judgment — minted 2021-12; verdict 2023-02-08", "x_oak_date_prefix": "2023-02", "x_oak_attribution": "confirmed", "external_references": [ { "source_name": "oak", "external_id": "2023-02-metabirkins-hermes-judgment", "url": "https://onchainattack.org/document/examples/2023-02-metabirkins-hermes-judgment/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--25af6662-d356-5de0-a192-0dbef1921fed", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Platypus Finance emergency-withdrawal logic flaw — Avalanche — 2023-02-16", "x_oak_date_prefix": "2023-02", "x_oak_attribution": "confirmed", "external_references": [ { "source_name": "oak", "external_id": "2023-02-platypus", "url": "https://onchainattack.org/document/examples/2023-02-platypus/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--3a9d0551-6b53-5185-9100-4613fd0b5c75", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Yearn iearnUSDT v1 deprecated-vault misconfiguration — Ethereum — 2023-02-02", "x_oak_date_prefix": "2023-02", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2023-02-yearn-v2", "url": "https://onchainattack.org/document/examples/2023-02-yearn-v2/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--14c72208-b20a-5615-a7a1-c6a053f7c45c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Euler Finance lending exploit — Ethereum — 2023-03-13", "x_oak_date_prefix": "2023-03", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2023-03-euler-finance", "url": "https://onchainattack.org/document/examples/2023-03-euler-finance/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--d02254a7-b701-55e0-ab8b-a015802f8635", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "ParaSpace whitehat rescue by BlockSec — an attacker inflates cAPE collateral value via a rebasingIndex manipulation, fails on gas, and BlockSec redeploys the attack to rescue the funds first — Ethereum — 2023-03-17", "x_oak_date_prefix": "2023-03", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2023-03-paraspace", "url": "https://onchainattack.org/document/examples/2023-03-paraspace/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--f46ef9cc-8f64-57cd-93c7-8c552a0f2ae2", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Rocket Pool node operator slashing — Ethereum — 2023-03", "x_oak_date_prefix": "2023-03", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2023-03-rocket-pool-validator-slashing", "url": "https://onchainattack.org/document/examples/2023-03-rocket-pool-validator-slashing/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--86909fd0-c486-5cd2-ad49-95770982dd1b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Allbridge stable-pool virtual-price manipulation — BNB Chain — 2023-04-01", "x_oak_date_prefix": "2023-04", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2023-04-allbridge", "url": "https://onchainattack.org/document/examples/2023-04-allbridge/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--ef1b1868-c641-5142-a304-440cc68d6e58", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Arbitrum Foundation governance bypass and treasury transfer — Ethereum — 2023-03/04", "x_oak_date_prefix": "2023-04", "x_oak_attribution": "confirmed", "external_references": [ { "source_name": "oak", "external_id": "2023-04-arbitrum-governance-bypass", "url": "https://onchainattack.org/document/examples/2023-04-arbitrum-governance-bypass/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--4a74e566-4f86-596e-b698-acfb368f18fb", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Sentiment Protocol read-only reentrancy via Balancer LP integration — Arbitrum — 2023-04-04", "x_oak_date_prefix": "2023-04", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2023-04-sentiment", "url": "https://onchainattack.org/document/examples/2023-04-sentiment/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--31c1c983-aba3-5320-9dbf-d7c3b0a266b6", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Ethereum Beacon Chain finality loss event — Ethereum — 2023-05-11 to 2023-05-12", "x_oak_date_prefix": "2023-05", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2023-05-ethereum-finality-loss", "url": "https://onchainattack.org/document/examples/2023-05-ethereum-finality-loss/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--11e7b5ad-1bf0-519b-a20e-892cd0da823c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Ledger Recover seed-recovery service trust-substrate-shift event — Ledger hardware-wallet ecosystem — 2023-05-16", "x_oak_date_prefix": "2023-05", "x_oak_attribution": "confirmed", "external_references": [ { "source_name": "oak", "external_id": "2023-05-ledger-recover-trust-substrate-shift", "url": "https://onchainattack.org/document/examples/2023-05-ledger-recover-trust-substrate-shift/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--b695a865-0dbd-59e3-b17c-3d4c750f7c41", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Mango Markets orderbook spoofing via fake-liquidity deployment — Solana — 2023-05 to 2023-08", "x_oak_date_prefix": "2023-05", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2023-05-mango-markets-orderbook-spoofing", "url": "https://onchainattack.org/document/examples/2023-05-mango-markets-orderbook-spoofing/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--efc8d88b-99e5-582c-9e96-e3f3a109c378", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Tornado Cash DAO Snapshot off-chain voting exploitation via governance-token Sybil deployment — chain-agnostic — 2023-05", "x_oak_date_prefix": "2023-05", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2023-05-tornado-cash-dao-snapshot-attack", "url": "https://onchainattack.org/document/examples/2023-05-tornado-cash-dao-snapshot-attack/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--66e530d7-c207-56db-916e-c845cb20e460", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Tornado Cash governance attack — Ethereum — 2023-05-20", "x_oak_date_prefix": "2023-05", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2023-05-tornado-cash-governance", "url": "https://onchainattack.org/document/examples/2023-05-tornado-cash-governance/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--a213a5e7-cffb-584e-aa10-8eab91a25b4b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Atomic Wallet — multi-chain — 2023-06-03", "x_oak_date_prefix": "2023-06", "x_oak_attribution": "confirmed", "external_references": [ { "source_name": "oak", "external_id": "2023-06-atomic-wallet", "url": "https://onchainattack.org/document/examples/2023-06-atomic-wallet/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--e74ac396-8519-5e39-be00-9f6341bc04ad", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Chibi Finance `panic` / `onlyGov` residual-authority exit-scam — Arbitrum — 2023-06-27", "x_oak_date_prefix": "2023-06", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2023-06-chibi-finance-onlygov-arbitrum", "url": "https://onchainattack.org/document/examples/2023-06-chibi-finance-onlygov-arbitrum/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--3eb36bc1-589c-5943-aee8-5ad7e3ddcb3f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "MOVEit Transfer mass-extortion campaign — Cl0p — 2023-05-27 onward", "x_oak_date_prefix": "2023-06", "x_oak_attribution": "confirmed", "external_references": [ { "source_name": "oak", "external_id": "2023-06-moveit-clop-campaign", "url": "https://onchainattack.org/document/examples/2023-06-moveit-clop-campaign/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--04cd0d07-b8af-5bce-927d-c2d8a4dd9f59", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Alphapo payment-processor hot-wallet compromise — Multi-chain (BTC, ETH, TRON) — 2023-07-22/23", "x_oak_date_prefix": "2023-07", "x_oak_attribution": "inferred-weak", "external_references": [ { "source_name": "oak", "external_id": "2023-07-alphapo", "url": "https://onchainattack.org/document/examples/2023-07-alphapo/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--183f1f80-a783-530f-8f78-65fca095421b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Curve Finance Exploit Freeze Coordination — Multi-Exchange Compliance Response — 2023-07", "x_oak_date_prefix": "2023-07", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2023-07-curve-finance-freeze-coordination", "url": "https://onchainattack.org/document/examples/2023-07-curve-finance-freeze-coordination/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--ef04d57b-3119-5dce-b63d-38cddd730917", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Curve Finance Vyper compiler-level reentrancy — Ethereum — 2023-07-30", "x_oak_date_prefix": "2023-07", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2023-07-curve-vyper", "url": "https://onchainattack.org/document/examples/2023-07-curve-vyper/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--e42775aa-1a4d-53a0-b9ef-945d7b4893df", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Italian Government Email Compromise — Twitter Legal Request Portal Hijack — 2023-07", "x_oak_date_prefix": "2023-07", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2023-07-italian-gov-email-twitter-legal-portal", "url": "https://onchainattack.org/document/examples/2023-07-italian-gov-email-twitter-legal-portal/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--8a8957fd-e157-51c1-82cf-5db427e78930", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Multichain MPC bridge verification-model collapse — multi-chain — 2023-07-06/07", "x_oak_date_prefix": "2023-07", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2023-07-multichain-mpc-bridge-verification-model-collapse", "url": "https://onchainattack.org/document/examples/2023-07-multichain-mpc-bridge-verification-model-collapse/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--b402fc0b-914f-5617-a438-f64d6e39c7da", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Multichain — cross-chain bridge protocol — 2023-07-06", "x_oak_date_prefix": "2023-07", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2023-07-multichain", "url": "https://onchainattack.org/document/examples/2023-07-multichain/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--75732954-c901-5af0-a932-59a2fd7685ff", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Balancer V2 Boosted Pools exploitation — Ethereum + multi-chain — 2023-08-22", "x_oak_date_prefix": "2023-08", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2023-08-balancer-v2", "url": "https://onchainattack.org/document/examples/2023-08-balancer-v2/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--c097fcc1-4ee6-55e2-a919-69454dd8b881", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Cypher Protocol sub-account isolation flaw — Solana — 2023-08-07", "x_oak_date_prefix": "2023-08", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2023-08-cypher", "url": "https://onchainattack.org/document/examples/2023-08-cypher/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--2f95685b-4af2-5253-958a-0a2c398519a3", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Exactly Protocol — a periphery contract took the market address as an argument and never checked it, so a fake market reentered and spent 117 users' approvals — Exactly Protocol / Optimism — 2023-08-18", "x_oak_date_prefix": "2023-08", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2023-08-exactly-protocol", "url": "https://onchainattack.org/document/examples/2023-08-exactly-protocol/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--831d31c2-2a72-5f5f-bd92-1a500a292ccf", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Magnate Finance / Solfire / Kokomo deployer-cluster exit-scam cohort — Solana / BNB Chain / Base — 2022-01 → 2023-08", "x_oak_date_prefix": "2023-08", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2023-08-magnate-finance-base-deployer-cluster", "url": "https://onchainattack.org/document/examples/2023-08-magnate-finance-base-deployer-cluster/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--2ea56eb4-c466-5931-a71b-36626f9e3511", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Milk Sad — `bx seed` documents 128–256 bits of entropy and delivers 32, because Mersenne Twister is seeded on the system clock: same second, same \"random\" wallet — Libbitcoin Explorer (CVE-2023-39910) — theft 2023-07-12, disclosed 2023-08-08", "x_oak_date_prefix": "2023-08", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2023-08-milk-sad-libbitcoin-bx-mersenne-twister-entropy-collapse", "url": "https://onchainattack.org/document/examples/2023-08-milk-sad-libbitcoin-bx-mersenne-twister-entropy-collapse/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--75f87d55-c402-591b-9d24-974be1d840bd", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "OpenSea Operator Filter Registry sunset — Ethereum + multi-chain — 2023-08-17 (announcement) to 2024-02-29 (grace-period end)", "x_oak_date_prefix": "2023-08", "x_oak_attribution": "confirmed", "external_references": [ { "source_name": "oak", "external_id": "2023-08-opensea-operator-filter-sunset", "url": "https://onchainattack.org/document/examples/2023-08-opensea-operator-filter-sunset/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--1a59e7ab-0da1-5a30-bf5e-c47fc82bfb50", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Steadefi deployer-key compromise and malicious-upgrade extraction — Arbitrum — 2023-08-07", "x_oak_date_prefix": "2023-08", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2023-08-steadefi", "url": "https://onchainattack.org/document/examples/2023-08-steadefi/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--62d7e0e5-d172-5b21-9045-2339a1e89814", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Verified Organization Phishing — Fake Verified Org Account Farms on X/Twitter — 2023-08", "x_oak_date_prefix": "2023-08", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2023-08-verified-org-phishing-account-farms", "url": "https://onchainattack.org/document/examples/2023-08-verified-org-phishing-account-farms/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--efb2f7df-cb49-500f-a114-93952eb70ca2", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Zunami Protocol price-manipulation drain via Curve pool — Ethereum — 2023-08-13", "x_oak_date_prefix": "2023-08", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2023-08-zunami", "url": "https://onchainattack.org/document/examples/2023-08-zunami/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--8d4aca46-f96b-5437-83c3-07fa4f185b52", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Caesars Entertainment ransom payment — ALPHV / Scattered Spider — 2023-09", "x_oak_date_prefix": "2023-09", "x_oak_attribution": "confirmed", "external_references": [ { "source_name": "oak", "external_id": "2023-09-caesars-entertainment", "url": "https://onchainattack.org/document/examples/2023-09-caesars-entertainment/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--3999554e-9aba-5a58-990e-6dce0992293c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Caesar's Ransomware — $12M Seized / Multi-Agency Recovery — 2023-09", "x_oak_date_prefix": "2023-09", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2023-09-caesars-ransomware-12m-seizure", "url": "https://onchainattack.org/document/examples/2023-09-caesars-ransomware-12m-seizure/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--4009f089-2779-57db-9616-e8da18dda2f4", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "CoinEx exchange hot-wallet compromise — Multi-chain (ETH, TRON, Polygon) — 2023-09-12", "x_oak_date_prefix": "2023-09", "x_oak_attribution": "inferred-strong", "external_references": [ { "source_name": "oak", "external_id": "2023-09-coinex", "url": "https://onchainattack.org/document/examples/2023-09-coinex/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--028d1045-820b-5634-993c-1d5c227cf25e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "JPEX Hong Kong unlicensed-exchange fraud — Hong Kong — 2023-09-13 onward", "x_oak_date_prefix": "2023-09", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2023-09-jpex-hong-kong", "url": "https://onchainattack.org/document/examples/2023-09-jpex-hong-kong/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--314fdac3-8817-5897-a586-d864d7afbe68", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "MGM Resorts ransomware intrusion — ALPHV / Scattered Spider — 2023-09-10", "x_oak_date_prefix": "2023-09", "x_oak_attribution": "confirmed", "external_references": [ { "source_name": "oak", "external_id": "2023-09-mgm-resorts", "url": "https://onchainattack.org/document/examples/2023-09-mgm-resorts/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--750b7795-8736-5687-a245-9e34fd4aded9", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Mixin Network — multi-chain — 2023-09-23", "x_oak_date_prefix": "2023-09", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2023-09-mixin-network", "url": "https://onchainattack.org/document/examples/2023-09-mixin-network/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--7a656a00-f025-5ce9-9aed-c178ca0bc8ee", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Nouns DAO rage-quit fork arbitrage — Ethereum — 2023-09-15", "x_oak_date_prefix": "2023-09", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2023-09-nouns-dao-fork-arbitrage", "url": "https://onchainattack.org/document/examples/2023-09-nouns-dao-fork-arbitrage/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--279af5b5-5ac8-577f-9c0b-39bfd9554846", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Stake.com hot-wallet theft — multi-chain — 2023-09-04", "x_oak_date_prefix": "2023-09", "x_oak_attribution": "confirmed", "external_references": [ { "source_name": "oak", "external_id": "2023-09-stake-com", "url": "https://onchainattack.org/document/examples/2023-09-stake-com/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--85a3ebaa-78ef-5d4d-9970-adebe7f0af34", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "LastPass Breach → Crypto Drain — Multi-Victim Seed Phrase Exposure — 2023-10", "x_oak_date_prefix": "2023-10", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2023-10-lastpass-breach-crypto-drain", "url": "https://onchainattack.org/document/examples/2023-10-lastpass-breach-crypto-drain/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--b726f77e-8a69-5b9b-9abe-08f893391252", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "dYdX V3 SUSHI/YFI targeted market manipulation and insurance-fund drain — dYdX V3 (StarkEx L2) — 2023-10-29 to 2023-11-18", "x_oak_date_prefix": "2023-11", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2023-11-dydx-sushi-yfi-manipulation", "url": "https://onchainattack.org/document/examples/2023-11-dydx-sushi-yfi-manipulation/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--d592c6ff-bfdc-5b88-907e-3e3d8c46415a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "HTX hot wallet + HECO Bridge — Ethereum ↔ HECO — 2023-11-22", "x_oak_date_prefix": "2023-11", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2023-11-htx-heco-bridge", "url": "https://onchainattack.org/document/examples/2023-11-htx-heco-bridge/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--d5db53c2-5339-556c-b7a0-3f69da84ae79", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "ICBC Financial Services LockBit intrusion — U.S. Treasury market disruption — 2023-11-09", "x_oak_date_prefix": "2023-11", "x_oak_attribution": "confirmed", "external_references": [ { "source_name": "oak", "external_id": "2023-11-icbc-financial-services", "url": "https://onchainattack.org/document/examples/2023-11-icbc-financial-services/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--41287938-37d1-5993-b37f-e35a165e8484", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "KyberSwap Elastic tick-state-manipulation exploit — multi-chain — 2023-11-22", "x_oak_date_prefix": "2023-11", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2023-11-kyberswap", "url": "https://onchainattack.org/document/examples/2023-11-kyberswap/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--1dcf9707-a46e-50d4-aabb-448de9a8d70d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Poloniex hot-wallet drain — multi-chain — 2023-11-10", "x_oak_date_prefix": "2023-11", "x_oak_attribution": "inferred-strong", "external_references": [ { "source_name": "oak", "external_id": "2023-11-poloniex", "url": "https://onchainattack.org/document/examples/2023-11-poloniex/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--af147847-bb24-54a5-90be-7780200f7fe9", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "SafeMoon (SFM) — BNB Chain — federal action 2023-11-01", "x_oak_date_prefix": "2023-11", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2023-11-safemoon-charges", "url": "https://onchainattack.org/document/examples/2023-11-safemoon-charges/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--efc75ded-3386-5766-b510-57b3180c864a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Solana Jito relayer eclipse griefing — Solana — November 2023", "x_oak_date_prefix": "2023-11", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2023-11-solana-jito-relayer-eclipse-griefing", "url": "https://onchainattack.org/document/examples/2023-11-solana-jito-relayer-eclipse-griefing/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--8939fe79-6810-5df9-b74c-e4042458506c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Galxe frontend DNS hijack pair — Ethereum / multi-chain — 2023-10-06 + 2023-12", "x_oak_date_prefix": "2023-12", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2023-12-galxe-dns", "url": "https://onchainattack.org/document/examples/2023-12-galxe-dns/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--3cc6aa8d-70f6-57ba-9f9a-255a104101ee", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Ledger Connect Kit Library Supply-Chain Compromise — multi-chain (EVM dApps) — 2023-12-14", "x_oak_date_prefix": "2023-12", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2023-12-ledger-connect-kit-library-supply-chain-compromise", "url": "https://onchainattack.org/document/examples/2023-12-ledger-connect-kit-library-supply-chain-compromise/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--70b8d8a7-56a3-57f5-8fa6-918121e62f2a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Orbit Chain $81M Cross-Chain Bridge Exploit — 2023-12", "x_oak_date_prefix": "2023-12", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2023-12-orbit-chain-bridge-exploit", "url": "https://onchainattack.org/document/examples/2023-12-orbit-chain-bridge-exploit/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--319fe684-69fe-5761-a6ed-8c4be2bd5eed", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Tellor (TRB) spot-perpetual manipulation and liquidation cascade — Ethereum / CEX — 2023-12-31", "x_oak_date_prefix": "2023-12", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2023-12-tellor-trb-manipulation", "url": "https://onchainattack.org/document/examples/2023-12-tellor-trb-manipulation/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--3a6fb2c2-a382-5fee-ba55-1c82fcba567a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Counterfeit-token dust-attack-lure cohort — EVM — 2022–2024 (cohort)", "x_oak_date_prefix": "2023-20", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2023-2024-counterfeit-token-dust-attack-lure-cohort", "url": "https://onchainattack.org/document/examples/2023-2024-counterfeit-token-dust-attack-lure-cohort/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--5dda2f3e-d81c-5883-90dc-1071467bbdc2", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "ERC-4337 bundler MEV extraction cohort — Ethereum / EVM L2s — 2023–2025 (cohort)", "x_oak_date_prefix": "2023-20", "x_oak_attribution": "confirmed", "external_references": [ { "source_name": "oak", "external_id": "2023-2024-erc4337-bundler-mev-cohort", "url": "https://onchainattack.org/document/examples/2023-2024-erc4337-bundler-mev-cohort/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--86f9e580-c799-5351-88e8-9c5aac7ca9ce", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "ERC-4337 Bundler MEV Extraction Cohort — Ethereum / Polygon / Arbitrum / Optimism / Base — 2023–2025", "x_oak_date_prefix": "2023-20", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2023-2024-erc4337-bundler-mev-extraction-cohort", "url": "https://onchainattack.org/document/examples/2023-2024-erc4337-bundler-mev-extraction-cohort/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--9993613d-7147-5408-ba3b-d6b3fa032da4", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "TeufeurS Kidnapping — $2M Crypto Ransom / $800K Frozen — 2023", "x_oak_date_prefix": "2023-20", "x_oak_attribution": "confirmed", "external_references": [ { "source_name": "oak", "external_id": "2023-2024-french-streamer-kidnapping-ransom-crypto", "url": "https://onchainattack.org/document/examples/2023-2024-french-streamer-kidnapping-ransom-crypto/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--fa6e4b62-1801-5566-a94a-18ce7d841df3", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Squeeth volatility auction slippage sandwich — Ethereum — 2023–2024", "x_oak_date_prefix": "2023-20", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2023-2024-squeeth-volatility-auction-slippage-sandwich", "url": "https://onchainattack.org/document/examples/2023-2024-squeeth-volatility-auction-slippage-sandwich/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--84e710d9-dc6f-5d78-bd78-65d67db358b4", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "StarkNet STRK Pre-Token Anticipation Phishing — 2023–2024", "x_oak_date_prefix": "2023-20", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2023-2024-starknet-strk-pre-token-anticipation-phishing", "url": "https://onchainattack.org/document/examples/2023-2024-starknet-strk-pre-token-anticipation-phishing/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--421ccea1-5fb3-53ed-97a5-53d15109544a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "UK Scammer @ape_31 — Fake PNL Screenshot Funnel to Paid Scam Services — 2023-2024", "x_oak_date_prefix": "2023-20", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2023-2024-uk-scammer-ape31-fake-pnl-services", "url": "https://onchainattack.org/document/examples/2023-2024-uk-scammer-ape31-fake-pnl-services/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--800dd046-6be1-53b5-a06b-f10deda02e47", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "zkSync airdrop-anticipation phishing campaign — 2023–2024", "x_oak_date_prefix": "2023-20", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2023-2024-zksync-airdrop-anticipation-phishing", "url": "https://onchainattack.org/document/examples/2023-2024-zksync-airdrop-anticipation-phishing/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--4682607a-1450-55ff-8f9d-40e80ee3ec53", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Akira Ransomware-as-a-Service — 2023–2025", "x_oak_date_prefix": "2023-20", "x_oak_attribution": "confirmed", "external_references": [ { "source_name": "oak", "external_id": "2023-2025-akira-raas", "url": "https://onchainattack.org/document/examples/2023-2025-akira-raas/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--9215f060-ba62-53cc-ab1e-7eacb8e416da", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "DeFi yield-strategy laundering via liquidity-provision and staking-as-rail — multi-chain — 2023–2025", "x_oak_date_prefix": "2023-20", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2023-2025-defi-yield-strategy-laundering-cohort", "url": "https://onchainattack.org/document/examples/2023-2025-defi-yield-strategy-laundering-cohort/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--bd5b0842-a68f-5f59-8ce5-a839d1790b71", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Fee-on-Transfer Token Accounting Exploit Cohort — multi-chain (EVM, BNB Chain, Polygon, Arbitrum) — 2023–2025", "x_oak_date_prefix": "2023-20", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2023-2025-fee-on-transfer-token-accounting-exploit-cohort", "url": "https://onchainattack.org/document/examples/2023-2025-fee-on-transfer-token-accounting-exploit-cohort/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--0803eb73-a171-5756-be8c-7144d5500114", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Multi-block MEV TWAP oracle grinding via proposer-builder coordination — Ethereum L1 — 2023–2025", "x_oak_date_prefix": "2023-20", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2023-2025-multi-block-mev-twap-oracle-grinding-cohort", "url": "https://onchainattack.org/document/examples/2023-2025-multi-block-mev-twap-oracle-grinding-cohort/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--b3197214-5976-566d-b4eb-aa3570648ab3", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Kraken and Coinbase Staking-as-a-Service SEC Enforcement and Validator-Set Disruption — 2023–2025", "x_oak_date_prefix": "2023-20", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2023-2025-sec-staking-service-enforcement-kraken-coinbase", "url": "https://onchainattack.org/document/examples/2023-2025-sec-staking-service-enforcement-kraken-coinbase/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--cfb8979a-d55a-5567-93ab-32910c9b12e3", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "WalletConnect session-hijack phishing campaigns — multi-chain — 2023–2025", "x_oak_date_prefix": "2023-20", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2023-2025-walletconnect-phishing-campaigns-cohort", "url": "https://onchainattack.org/document/examples/2023-2025-walletconnect-phishing-campaigns-cohort/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--4d515559-22f7-5e43-b8ed-98c8a46373e4", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Coinbase Support Impersonation — Multi-Victim Social Engineering — 2023–2026", "x_oak_date_prefix": "2023-20", "x_oak_attribution": "confirmed", "external_references": [ { "source_name": "oak", "external_id": "2023-2026-coinbase-support-impersonation", "url": "https://onchainattack.org/document/examples/2023-2026-coinbase-support-impersonation/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--a45caf1d-65ab-5670-8699-6c523d3b2a4c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "ERC-4337 Paymaster Griefing and DoS Attack Surface Cohort — 2023–2026", "x_oak_date_prefix": "2023-20", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2023-2026-erc4337-paymaster-griefing-and-dos-cohort", "url": "https://onchainattack.org/document/examples/2023-2026-erc4337-paymaster-griefing-and-dos-cohort/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--ed7da8b1-ca2d-5fae-b7e9-e608985db378", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Fake DEX / clone-frontend distribution cohort — multi-chain — 2023 onward (multi-year cohort)", "x_oak_date_prefix": "2023-20", "x_oak_attribution": "confirmed", "external_references": [ { "source_name": "oak", "external_id": "2023-2026-fake-dex-clone-frontend-cohort", "url": "https://onchainattack.org/document/examples/2023-2026-fake-dex-clone-frontend-cohort/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--849b49f2-2ef2-5135-82cc-bdb89ae02eeb", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Fake hardware-wallet firmware-update / recovery-app phishing cohort — Ledger / Trezor user base — 2023 onward (multi-year cohort)", "x_oak_date_prefix": "2023-20", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2023-2026-fake-firmware-update-phishing-cohort", "url": "https://onchainattack.org/document/examples/2023-2026-fake-firmware-update-phishing-cohort/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--130c6775-02d3-5eea-9290-51cec5694b33", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Hundred Finance Compound V2 fork exploit — Optimism — 2023-04-15", "x_oak_date_prefix": "2023", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2023-hundred-finance-compound-v2-fork-cascade", "url": "https://onchainattack.org/document/examples/2023-hundred-finance-compound-v2-fork-cascade/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--ce7ceb3e-c29f-5e78-aeb5-d370d8ae1d4d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Jaredfromsubway MEV sandwich bot — Ethereum — 2023", "x_oak_date_prefix": "2023", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2023-jaredfromsubway-mev", "url": "https://onchainattack.org/document/examples/2023-jaredfromsubway-mev/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--fadadd03-07a3-5bac-b21e-3b8bbb4bd00a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "MEV-Boost relay equivocation attack surface — Ethereum — 2023", "x_oak_date_prefix": "2023", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2023-mev-boost-equivocation", "url": "https://onchainattack.org/document/examples/2023-mev-boost-equivocation/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--6f69f23d-57f8-5973-b611-04a0495b5dd2", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "SIM Swap Wave — Multi-Victim Telecom Attack — 2023", "x_oak_date_prefix": "2023", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2023-sim-swap-crypto-wave", "url": "https://onchainattack.org/document/examples/2023-sim-swap-crypto-wave/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--25c7b411-b987-5f55-9581-65a01c549bd3", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Tornado Cash → Magic: The Gathering Cards — $25M Collectibles Laundering — 2023", "x_oak_date_prefix": "2023", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2023-tornado-cash-25m-collectibles-laundering", "url": "https://onchainattack.org/document/examples/2023-tornado-cash-25m-collectibles-laundering/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--b52b7b37-157e-5572-af25-9182996b6d80", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "CoinsPaid $37M Lazarus Group Attack — Payment Processor Exploit — 2024-01", "x_oak_date_prefix": "2024-01", "x_oak_attribution": "confirmed", "external_references": [ { "source_name": "oak", "external_id": "2024-01-coinspaid-lazarus-endpoint-compromise", "url": "https://onchainattack.org/document/examples/2024-01-coinspaid-lazarus-endpoint-compromise/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--e723ec60-878d-57b0-aaa8-221fbbf8572c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Email Impersonation Phishing Wave — CoinTelegraph/WalletConnect/Token Terminal Impersonation — 2024-01", "x_oak_date_prefix": "2024-01", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2024-01-cointelegraph-walletconnect-email-phishing", "url": "https://onchainattack.org/document/examples/2024-01-cointelegraph-walletconnect-email-phishing/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--484a7428-0b56-513e-bb23-32dfcb3a9c53", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Concentric Finance multisig signing-key social-engineering compromise — Arbitrum — 2024-01-22", "x_oak_date_prefix": "2024-01", "x_oak_attribution": "inferred-strong", "external_references": [ { "source_name": "oak", "external_id": "2024-01-concentric", "url": "https://onchainattack.org/document/examples/2024-01-concentric/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--aac9b5cf-5562-5498-a0e6-d29636639bb4", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Blue-chip DeFi yield-protocol laundering via LST and lending-market cover — Ethereum — 2024", "x_oak_date_prefix": "2024-01", "x_oak_attribution": "inferred-strong", "external_references": [ { "source_name": "oak", "external_id": "2024-01-defi-bluechip-yield-laundering", "url": "https://onchainattack.org/document/examples/2024-01-defi-bluechip-yield-laundering/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--61165863-81d5-5804-979f-0b68a222d058", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "DPRK-attributed multi-stage chain-hop laundering via privacy-chain conversions — cross-chain — 2024", "x_oak_date_prefix": "2024-01", "x_oak_attribution": "inferred-strong", "external_references": [ { "source_name": "oak", "external_id": "2024-01-dprk-chain-hop-laundering", "url": "https://onchainattack.org/document/examples/2024-01-dprk-chain-hop-laundering/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--5e779dc3-8586-54f7-8319-183471656fb7", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Gamma Strategies $3.4M Flash Loan Price Manipulation — 2024-01", "x_oak_date_prefix": "2024-01", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2024-01-gamma-strategies-flash-loan-exploit", "url": "https://onchainattack.org/document/examples/2024-01-gamma-strategies-flash-loan-exploit/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--e368ee77-148d-556a-adbb-39f953366044", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "HyperVerse / HyperFund — Sam Lee / Ryan Xu fake-asset-manager Ponzi (HyperTech ecosystem) — global — 2020-06 to 2022-11 (operating) / DOJ + SEC charges 2024-01", "x_oak_date_prefix": "2024-01", "x_oak_attribution": "confirmed", "external_references": [ { "source_name": "oak", "external_id": "2024-01-hyperverse-hyperfund", "url": "https://onchainattack.org/document/examples/2024-01-hyperverse-hyperfund/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--0b122434-9d1d-57e1-8c0b-2f81fd655384", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "KK Park compound-operated investment-fraud takedown — Myanmar/Thailand border — 2024", "x_oak_date_prefix": "2024-01", "x_oak_attribution": "confirmed", "external_references": [ { "source_name": "oak", "external_id": "2024-01-kk-park-compound-takedown", "url": "https://onchainattack.org/document/examples/2024-01-kk-park-compound-takedown/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--ca986208-0f27-52b4-a14d-34902d507d6a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "NFT marketplace royalty-enforcement sunset and creator-revenue bypass — multi-chain (Ethereum, Solana, Bitcoin ordinals) — 2024", "x_oak_date_prefix": "2024-01", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2024-01-nft-royalty-bypass", "url": "https://onchainattack.org/document/examples/2024-01-nft-royalty-bypass/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--31c404a6-0440-5307-b594-88fc2e8f740a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Orbit Bridge — Ethereum ↔ multi-chain — 2024-01-01", "x_oak_date_prefix": "2024-01", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2024-01-orbit-bridge", "url": "https://onchainattack.org/document/examples/2024-01-orbit-bridge/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--b818a054-7d66-5bb2-bee1-7daecd12e39d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Post-Tornado-Cash DeFi yield-protocol laundering shift — cross-chain — 2024 onward", "x_oak_date_prefix": "2024-01", "x_oak_attribution": "inferred-strong", "external_references": [ { "source_name": "oak", "external_id": "2024-01-post-tornado-defi-yield-laundering", "url": "https://onchainattack.org/document/examples/2024-01-post-tornado-defi-yield-laundering/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--d4c4b787-351d-5315-86cf-516dc0b79606", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Ripple — Private Key Compromise — 2024-01-31", "x_oak_date_prefix": "2024-01", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2024-01-ripple-hot-wallet-compromise", "url": "https://onchainattack.org/document/examples/2024-01-ripple-hot-wallet-compromise/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--db8b3d48-eff6-5928-b419-607be4252405", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "U.S. SEC verified X-account compromise and fake Bitcoin ETF approval — chain-agnostic — 2024-01-09", "x_oak_date_prefix": "2024-01", "x_oak_attribution": "confirmed", "external_references": [ { "source_name": "oak", "external_id": "2024-01-sec-x-account-compromise", "url": "https://onchainattack.org/document/examples/2024-01-sec-x-account-compromise/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--e27c6451-92e5-507f-8b59-1970820c2567", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Socket/Bungee bridge exploit — Ethereum — 2024-01-16", "x_oak_date_prefix": "2024-01", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2024-01-socket-bungee", "url": "https://onchainattack.org/document/examples/2024-01-socket-bungee/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--eec24e36-c501-5d4d-b7c8-119b7099a5a0", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "BitForex hot-wallet drain (operator-driven exit-scam pattern) — multi-chain — 2024-02-23", "x_oak_date_prefix": "2024-02", "x_oak_attribution": "inferred-weak", "external_references": [ { "source_name": "oak", "external_id": "2024-02-bitforex", "url": "https://onchainattack.org/document/examples/2024-02-bitforex/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--5fb134f4-9cd9-553a-969c-75b0fca4f8c4", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Blur points-farming wash-trading ring — coordinated circular NFT trades across linked wallet clusters — Ethereum — 2023–2024", "x_oak_date_prefix": "2024-02", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2024-02-blur-wash-trading-ring", "url": "https://onchainattack.org/document/examples/2024-02-blur-wash-trading-ring/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--8885e6a7-57c6-5273-8beb-feafaad0d5c4", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Change Healthcare ransom payment — Bitcoin — 2024-02-21 to 2024-03-05", "x_oak_date_prefix": "2024-02", "x_oak_attribution": "confirmed", "external_references": [ { "source_name": "oak", "external_id": "2024-02-change-healthcare-ransom", "url": "https://onchainattack.org/document/examples/2024-02-change-healthcare-ransom/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--721e1668-d525-5b35-9109-b86c49abd1f0", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "FixedFloat instant-swap hot-wallet drain — multi-chain — 2024-02-16", "x_oak_date_prefix": "2024-02", "x_oak_attribution": "inferred-strong", "external_references": [ { "source_name": "oak", "external_id": "2024-02-fixedfloat", "url": "https://onchainattack.org/document/examples/2024-02-fixedfloat/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--0252e15a-1fe7-5be8-a954-e6b765034b27", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Honeypot-by-design token cohort — Ethereum / BNB Chain / Base — 2024-02 onward", "x_oak_date_prefix": "2024-02", "x_oak_attribution": "confirmed", "external_references": [ { "source_name": "oak", "external_id": "2024-02-honeypot-token-cohort-cross-chain", "url": "https://onchainattack.org/document/examples/2024-02-honeypot-token-cohort-cross-chain/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--1bc76371-f648-5ae4-b6fb-464177530cc6", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "LockBit Operation Cronos disruption — multi-jurisdiction takedown — 2024-02-19 to 2024-02-20", "x_oak_date_prefix": "2024-02", "x_oak_attribution": "confirmed", "external_references": [ { "source_name": "oak", "external_id": "2024-02-lockbit-operation-cronos", "url": "https://onchainattack.org/document/examples/2024-02-lockbit-operation-cronos/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--7cad9a30-c7a3-5fc1-8007-641c23f15ad4", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "MINER — the transfer function checked that neither address was null but not that they were different, so sending tokens to yourself doubled your balance — MINER (ERC-X) / Ethereum — 2024-02", "x_oak_date_prefix": "2024-02", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2024-02-miner-erc-x-self-transfer-cached-balance-double-spend", "url": "https://onchainattack.org/document/examples/2024-02-miner-erc-x-self-transfer-cached-balance-double-spend/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--ce08ff9a-c542-5924-8bcd-9eca1de48483", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "PlayDapp $290M Private Key Compromise — Gaming Platform Exploit — 2024-02", "x_oak_date_prefix": "2024-02", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2024-02-playdapp-private-key-compromise", "url": "https://onchainattack.org/document/examples/2024-02-playdapp-private-key-compromise/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--24e04db0-aa2a-5100-8be2-56c79cc21cc1", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Stader ETHx LST secondary-market discount to ETH NAV — DEX liquidity pool pricing divergence during LRT-season liquidity migration — Ethereum — 2024-02", "x_oak_date_prefix": "2024-02", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2024-02-stader-ethx-lst-discount", "url": "https://onchainattack.org/document/examples/2024-02-stader-ethx-lst-discount/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--cb86812b-dcb6-5cba-a4c0-c94728570cc4", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Arbitrum ARB team-and-investor vesting-cliff unlock and coordinated sell-pressure — Ethereum — 2024-03-16", "x_oak_date_prefix": "2024-03", "x_oak_attribution": "inferred-strong", "external_references": [ { "source_name": "oak", "external_id": "2024-03-arbitrum-arb-vesting-cliff-dump", "url": "https://onchainattack.org/document/examples/2024-03-arbitrum-arb-vesting-cliff-dump/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--a1091722-63ac-5bb8-b795-98d272432968", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "@blknoiz06 Impersonation — $2.6M Meme Coin Reply Phishing — 2024-03", "x_oak_date_prefix": "2024-03", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2024-03-blknoiz06-impersonation-reply-phishing", "url": "https://onchainattack.org/document/examples/2024-03-blknoiz06-impersonation-reply-phishing/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--c7a92850-ef3b-5f1e-87ff-e01a6cef5876", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Coinbase Smart Wallet pre-launch audit disclosure (H-01 ownership-recovery loss-of-funds) — Base — 2024-03", "x_oak_date_prefix": "2024-03", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2024-03-coinbase-smart-wallet-disclosure", "url": "https://onchainattack.org/document/examples/2024-03-coinbase-smart-wallet-disclosure/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--c781d94d-0005-53bd-a142-bcc7479ae9b8", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Curio DAO governance attack — Ethereum + multi-chain — 2024-03-23", "x_oak_date_prefix": "2024-03", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2024-03-curio", "url": "https://onchainattack.org/document/examples/2024-03-curio/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--fde5993c-932e-566c-9756-23690b165393", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Profanity vanity-address entropy cohort tail — Ethereum — 2023–2024 (cohort-extended case)", "x_oak_date_prefix": "2024-03", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2024-03-ether-fi-profanity-entropy-cohort", "url": "https://onchainattack.org/document/examples/2024-03-ether-fi-profanity-entropy-cohort/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--40e870c8-71fe-50fc-b14e-dd75c231d946", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Jolan Lacroix — $900K Presale Theft / Gambling on Meme Coins and Milady NFTs — 2024-03", "x_oak_date_prefix": "2024-03", "x_oak_attribution": "confirmed", "external_references": [ { "source_name": "oak", "external_id": "2024-03-jolan-lacroix-presale-theft", "url": "https://onchainattack.org/document/examples/2024-03-jolan-lacroix-presale-theft/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--4778f95d-84f8-5ada-8adf-203ed2b5e2b3", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Kyle DeGods — Fake Hack / Insider Theft from Nuddies NFT Project — 2024-03", "x_oak_date_prefix": "2024-03", "x_oak_attribution": "confirmed", "external_references": [ { "source_name": "oak", "external_id": "2024-03-kyle-nuddies-nft-fake-hack", "url": "https://onchainattack.org/document/examples/2024-03-kyle-nuddies-nft-fake-hack/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--ccdb7c1c-d3cb-5b65-8dd8-a78d0640ae53", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Munchables — Blast L2 — 2024-03-26", "x_oak_date_prefix": "2024-03", "x_oak_attribution": "inferred-strong", "external_references": [ { "source_name": "oak", "external_id": "2024-03-munchables", "url": "https://onchainattack.org/document/examples/2024-03-munchables/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--769600c5-bc05-5dcc-855b-5ed6dec71f14", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Prisma Finance MigrateTroveZap delegatecall exploit — Ethereum — 2024-03-28", "x_oak_date_prefix": "2024-03", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2024-03-prisma-finance", "url": "https://onchainattack.org/document/examples/2024-03-prisma-finance/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--5a9465d2-38d4-5b37-9fe5-07b378471817", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "WOOFi Pro sPMM curve flash-loan manipulation — Arbitrum — 2024-03-05", "x_oak_date_prefix": "2024-03", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2024-03-woofi", "url": "https://onchainattack.org/document/examples/2024-03-woofi/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--657c8038-be69-5c8f-9555-33bea9c11bf2", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Change Healthcare data-leak re-extortion — Bitcoin / RansomHub brand — 2024-04", "x_oak_date_prefix": "2024-04", "x_oak_attribution": "confirmed", "external_references": [ { "source_name": "oak", "external_id": "2024-04-change-healthcare-reextortion", "url": "https://onchainattack.org/document/examples/2024-04-change-healthcare-reextortion/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--1a447504-f871-575d-80ef-9d4f2abcb85e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Hedgey Finance claim-function input-validation exploit — multi-chain — 2024-04-19", "x_oak_date_prefix": "2024-04", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2024-04-hedgey", "url": "https://onchainattack.org/document/examples/2024-04-hedgey/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--37569106-395f-5a51-9e78-ad09d07cefd3", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "NFT wrapper / fractionalisation protocol royalty circumvention cohort — NFTX / FloorDAO / Sudoswap — Ethereum — 2022–2025", "x_oak_date_prefix": "2024-04", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2024-04-nft-wrapper-royalty-circumvention-cohort", "url": "https://onchainattack.org/document/examples/2024-04-nft-wrapper-royalty-circumvention-cohort/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--933f3961-2680-5216-99ab-e2d6d6aa1847", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Pike Finance Wormhole-NTT cross-chain message-handling exploit — multi-chain — 2024-04-30 / 2024-05-05", "x_oak_date_prefix": "2024-04", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2024-04-pike-finance", "url": "https://onchainattack.org/document/examples/2024-04-pike-finance/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--6f68b81c-289a-54d0-b63b-4d10f477c736", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Renzo ezETH liquid-restaking-token depeg and looped-leverage liquidation cascade — Ethereum L1 + multi-chain — 2024-04-24", "x_oak_date_prefix": "2024-04", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2024-04-renzo-ezeth-depeg", "url": "https://onchainattack.org/document/examples/2024-04-renzo-ezeth-depeg/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--0cd2343f-e35d-5f9e-9fd6-f15d14ef06d7", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "ZKasino gambling-platform bridge-exit — Ethereum / L2s — 2024-04-20 onward", "x_oak_date_prefix": "2024-04", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2024-04-zkasino-bridge-exit", "url": "https://onchainattack.org/document/examples/2024-04-zkasino-bridge-exit/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--6d9d3393-3b0d-58d1-9606-9c9c310aaf68", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Address Poisoning — Ethereum — 2024-05-03 (\\$68M WBTC, returned)", "x_oak_date_prefix": "2024-05", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2024-05-address-poisoning-68m", "url": "https://onchainattack.org/document/examples/2024-05-address-poisoning-68m/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--fc59e040-13e0-525a-aa8c-601aad46ea0c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Cypher Protocol Hoak insider theft from redemption fund — Solana — 2024-05", "x_oak_date_prefix": "2024-05", "x_oak_attribution": "confirmed", "external_references": [ { "source_name": "oak", "external_id": "2024-05-cypher-hoak-insider-redemption-theft", "url": "https://onchainattack.org/document/examples/2024-05-cypher-hoak-insider-redemption-theft/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--773a4445-53c6-5606-959a-83203e76b6b9", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "DMM Bitcoin exchange hack — Bitcoin — 2024-05-31", "x_oak_date_prefix": "2024-05", "x_oak_attribution": "confirmed", "external_references": [ { "source_name": "oak", "external_id": "2024-05-dmm-bitcoin", "url": "https://onchainattack.org/document/examples/2024-05-dmm-bitcoin/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--36e2061d-0d31-57bf-8c7b-d9b2e5a9413b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "EigenLayer restaking airdrop dispute and AVS slashing-condition cohort — Ethereum L1 — 2024-05 onward", "x_oak_date_prefix": "2024-05", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2024-05-eigenlayer-restaking-airdrop", "url": "https://onchainattack.org/document/examples/2024-05-eigenlayer-restaking-airdrop/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--9459a692-b097-56a9-9332-6807b3bbd360", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Ether.fi weETH liquid-restaking-token discount-to-NAV event — Ethereum L1 — 2024-05", "x_oak_date_prefix": "2024-05", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2024-05-ether-fi-weeth-discount-depeg", "url": "https://onchainattack.org/document/examples/2024-05-ether-fi-weeth-discount-depeg/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--96f0273b-3f01-55e3-9747-9293322337c2", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Gala Games admin-key compromise emergency-recovery — Ethereum — 2024-05-20", "x_oak_date_prefix": "2024-05", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2024-05-gala-games", "url": "https://onchainattack.org/document/examples/2024-05-gala-games/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--2fe76cf4-a5e9-5b13-b7a5-fbe3f64e584e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "GCR Classic Hack → $3.3M Insider Longs on Hyperliquid — 2024-05", "x_oak_date_prefix": "2024-05", "x_oak_attribution": "inferred-strong", "external_references": [ { "source_name": "oak", "external_id": "2024-05-gcrclassic-hack-hyperliquid-insider-longs", "url": "https://onchainattack.org/document/examples/2024-05-gcrclassic-hack-hyperliquid-insider-longs/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--c8c1f7f6-3ea0-5e79-8365-4a1dd91b5fe4", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Sonne Finance empty-market rounding-error exploit — Optimism — 2024-05-14", "x_oak_date_prefix": "2024-05", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2024-05-sonne-finance", "url": "https://onchainattack.org/document/examples/2024-05-sonne-finance/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--b35a7c3f-f827-526c-aaf4-f97e54cd7e02", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Uniswap DAO delegation governance concentration — delegate voting-weight accumulation and community governance dynamics — Ethereum — 2023–2025", "x_oak_date_prefix": "2024-05", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2024-05-uniswap-dao-delegation-governance-concentration", "url": "https://onchainattack.org/document/examples/2024-05-uniswap-dao-delegation-governance-concentration/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--efcab320-a9d6-5d83-a249-4b57b38f37b9", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "BtcTurk hot-wallet drain (first incident) — multi-chain — 2024-06-22", "x_oak_date_prefix": "2024-06", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2024-06-btcturk", "url": "https://onchainattack.org/document/examples/2024-06-btcturk/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--d5ae4f1d-08e1-59b9-a2fb-a4d3ca27ace9", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "CoinStats MetaMask-Snap-related compromise — Ethereum + multi-chain — 2024-06-22", "x_oak_date_prefix": "2024-06", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2024-06-coinstats-snap", "url": "https://onchainattack.org/document/examples/2024-06-coinstats-snap/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--2a46bad1-4305-53f5-8c08-bac0367bf573", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "ERC-4337 bundler MEV extraction on Polygon — specific operator-level bundler front-running incident — 2024-06", "x_oak_date_prefix": "2024-06", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2024-06-erc4337-bundler-mev-polygon-operator", "url": "https://onchainattack.org/document/examples/2024-06-erc4337-bundler-mev-polygon-operator/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--9d61bf9b-46df-571e-a974-24dbd1327636", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Holograph deployer-key compromise unlimited-mint-and-dump — Ethereum — 2024-06-13", "x_oak_date_prefix": "2024-06", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2024-06-holograph", "url": "https://onchainattack.org/document/examples/2024-06-holograph/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--a5390054-90ca-5f11-95fd-91c9b6ccd0e0", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Kelp rsETH liquid-restaking-token depeg — Ethereum L1 — 2024-06", "x_oak_date_prefix": "2024-06", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2024-06-kelp-rseth-depeg", "url": "https://onchainattack.org/document/examples/2024-06-kelp-rseth-depeg/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--9f149174-24fb-59e4-aa13-3484ae9abb0e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Loopring Smart Wallet guardian-recovery exploit — Ethereum — 2024-06-09", "x_oak_date_prefix": "2024-06", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2024-06-loopring-smart-wallet", "url": "https://onchainattack.org/document/examples/2024-06-loopring-smart-wallet/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--67e5e373-9a9a-50f2-88d6-8ca3391d33c5", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Mark Cuban — Public Figure Wallet Social Engineering Compromise — 2024-06", "x_oak_date_prefix": "2024-06", "x_oak_attribution": "confirmed", "external_references": [ { "source_name": "oak", "external_id": "2024-06-mark-cuban-wallet-social-engineering", "url": "https://onchainattack.org/document/examples/2024-06-mark-cuban-wallet-social-engineering/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--7c46bed3-bc74-56cc-9b97-071120441667", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "OpenSea creator-royalty enforcement sunset — EVM NFT marketplaces — 2024-06 to 2025-01", "x_oak_date_prefix": "2024-06", "x_oak_attribution": "confirmed", "external_references": [ { "source_name": "oak", "external_id": "2024-06-opensea-royalty-shift", "url": "https://onchainattack.org/document/examples/2024-06-opensea-royalty-shift/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--1e417935-b343-58ef-8240-cfea3d960977", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Polymarket Barron Trump / DJT memecoin oracle-override dispute — 2024", "x_oak_date_prefix": "2024-06", "x_oak_attribution": "confirmed", "external_references": [ { "source_name": "oak", "external_id": "2024-06-polymarket-djt-oracle-override", "url": "https://onchainattack.org/document/examples/2024-06-polymarket-djt-oracle-override/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--ac5a8381-ef14-5676-8a2a-8a7cd982bf65", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Solana validator-coordinated sandwich-attack MEV cohort and Foundation delegation-program removal — Solana — 2024-06", "x_oak_date_prefix": "2024-06", "x_oak_attribution": "confirmed", "external_references": [ { "source_name": "oak", "external_id": "2024-06-solana-validator-sandwich-mev-cohort", "url": "https://onchainattack.org/document/examples/2024-06-solana-validator-sandwich-mev-cohort/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--6c8767bf-892c-5300-8646-d79f95b917a4", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Bittensor `bittensor` PyPI supply-chain coldkey-exfiltration compromise — Bittensor / TAO — 2024-07-02", "x_oak_date_prefix": "2024-06", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2024-06-uwu-bittensor", "url": "https://onchainattack.org/document/examples/2024-06-uwu-bittensor/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--50994397-7ea5-5e27-8fc3-f50aa134811e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "UwU Lend sUSDe oracle thin-input manipulation — Ethereum — 2024-06-10", "x_oak_date_prefix": "2024-06", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2024-06-uwu-lend", "url": "https://onchainattack.org/document/examples/2024-06-uwu-lend/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--54db2624-e9eb-5b90-a7a6-a3840a40145a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Velocore CPMM fee-rate underflow exploit — zkSync Era / Linea — 2024-06-02", "x_oak_date_prefix": "2024-06", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2024-06-velocore", "url": "https://onchainattack.org/document/examples/2024-06-velocore/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--734a8b9f-2a46-570f-bd0c-69548096980c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Compound cross-chain governance relay misconfiguration — Ethereum / multi-chain — 2023–2024 (audit-finding class)", "x_oak_date_prefix": "2024-07", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2024-07-compound-cross-chain-governance-relay", "url": "https://onchainattack.org/document/examples/2024-07-compound-cross-chain-governance-relay/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--2982628e-4e21-5050-b943-fcc51f6f21df", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Compound DAO Proposal 289 attempted governance takeover — Ethereum — 2024-07-28", "x_oak_date_prefix": "2024-07", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2024-07-compound-vote-takeover", "url": "https://onchainattack.org/document/examples/2024-07-compound-vote-takeover/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--ff591dc7-858d-512a-b0a3-3135df9c36ce", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Gurvinder Bhangu (Gurv) — Celebrity X Account Compromise → Meme Coin Scams — 2024-07", "x_oak_date_prefix": "2024-07", "x_oak_attribution": "confirmed", "external_references": [ { "source_name": "oak", "external_id": "2024-07-gurv-celebrity-x-account-compromise", "url": "https://onchainattack.org/document/examples/2024-07-gurv-celebrity-x-account-compromise/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--d83d8307-a24c-57d5-a3ae-b3d049ef2e28", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Li.Fi cross-chain aggregator facet exploit — multi-chain — 2024-07-16", "x_oak_date_prefix": "2024-07", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2024-07-li-finance", "url": "https://onchainattack.org/document/examples/2024-07-li-finance/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--5e94453b-e9c0-54ec-b8fd-5814f1d7a074", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "$NEIRO Solana memecoin bundled-launch concentration rug — Solana — 2024-07-27", "x_oak_date_prefix": "2024-07", "x_oak_attribution": "inferred-strong", "external_references": [ { "source_name": "oak", "external_id": "2024-07-neiro-solana-bundled-launch-rug", "url": "https://onchainattack.org/document/examples/2024-07-neiro-solana-bundled-launch-rug/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--77785b16-2312-5b7c-9ca4-f97ef5700612", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Puffer pufETH LRT depeg — redemption-constrained discount — Ethereum — 2024-08", "x_oak_date_prefix": "2024-07", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2024-07-puffer-pufeth-depeg", "url": "https://onchainattack.org/document/examples/2024-07-puffer-pufeth-depeg/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--f3a58632-0be2-5f97-8bc8-43521a78099e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "WazirX — Ethereum — 2024-07-18", "x_oak_date_prefix": "2024-07", "x_oak_attribution": "confirmed", "external_references": [ { "source_name": "oak", "external_id": "2024-07-wazirx", "url": "https://onchainattack.org/document/examples/2024-07-wazirx/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--fb56f122-278b-591e-a26b-69df9f0ec67e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "4064 BTC — Instant Exchange + Cross-Chain Bridge Laundering — 2024-08", "x_oak_date_prefix": "2024-08", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2024-08-4064-btc-multi-hop-cross-chain-laundering", "url": "https://onchainattack.org/document/examples/2024-08-4064-btc-multi-hop-cross-chain-laundering/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--b7312451-2ce8-5da1-ab1e-6bb19211c00e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Bittensor PyPI compromise — coldkey-cohort impact — Bittensor / TAO — 2024-07 to 2024-08 (cohort)", "x_oak_date_prefix": "2024-08", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2024-08-bittensor-coldkey-cohort", "url": "https://onchainattack.org/document/examples/2024-08-bittensor-coldkey-cohort/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--a1334861-4d05-58ae-8ce0-ba1f533c7f91", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "DPRK IT Worker Crypto Team Infiltration — Multi-Protocol — 2024-08", "x_oak_date_prefix": "2024-08", "x_oak_attribution": "confirmed", "external_references": [ { "source_name": "oak", "external_id": "2024-08-dprk-it-worker-infiltration", "url": "https://onchainattack.org/document/examples/2024-08-dprk-it-worker-infiltration/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--01a0b441-e293-5488-97f6-812501d4e039", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "ERC-4337 paymaster validation-bypass disclosure cohort — EVM — 2024", "x_oak_date_prefix": "2024-08", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2024-08-erc4337-paymaster-validation-bypass", "url": "https://onchainattack.org/document/examples/2024-08-erc4337-paymaster-validation-bypass/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--7c63ae95-d84e-5071-ba3a-1320dcea0025", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Genesis Creditor — Multi-Stage Impersonation Social Engineering — 2024-08-19", "x_oak_date_prefix": "2024-08", "x_oak_attribution": "confirmed", "external_references": [ { "source_name": "oak", "external_id": "2024-08-genesis-creditor-social-engineering", "url": "https://onchainattack.org/document/examples/2024-08-genesis-creditor-social-engineering/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--7b67a764-2671-585e-aaef-dda7d1324552", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Nexera (formerly AllianceBlock) NXRA proxy-admin compromise — Ethereum — 2024-08-06", "x_oak_date_prefix": "2024-08", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2024-08-nexera", "url": "https://onchainattack.org/document/examples/2024-08-nexera/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--14895875-0716-5cfa-8012-3b8a5337822b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Penpie Finance yield-optimizer reward-accounting exploit — Ethereum + Arbitrum — 2024-09-03", "x_oak_date_prefix": "2024-08", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2024-08-penpie-yield", "url": "https://onchainattack.org/document/examples/2024-08-penpie-yield/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--77c2ed35-c05b-5f5b-b16b-48ab23acba0b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Ronin Bridge upgrade initialization failure — Ronin / Ethereum — 2024-08-06", "x_oak_date_prefix": "2024-08", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2024-08-ronin-bridge-upgrade", "url": "https://onchainattack.org/document/examples/2024-08-ronin-bridge-upgrade/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--d221ee63-d64d-5ec6-bbe5-7d909f861ffd", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Banana Gun oracle-messenger information leak — Ethereum — 2024-09-19", "x_oak_date_prefix": "2024-09", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2024-09-banana-gun", "url": "https://onchainattack.org/document/examples/2024-09-banana-gun/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--f4c8b967-74ad-530f-964b-2ff43e851fa8", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "BingX hot-wallet drain — multi-chain — 2024-09-20", "x_oak_date_prefix": "2024-09", "x_oak_attribution": "inferred-strong", "external_references": [ { "source_name": "oak", "external_id": "2024-09-bingx", "url": "https://onchainattack.org/document/examples/2024-09-bingx/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--5fc89265-c9e6-5d30-819e-e83ff53c524f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "DeltaPrime admin-key compromise + malicious upgrade — Arbitrum + Avalanche — 2024-09-16/17", "x_oak_date_prefix": "2024-09", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2024-09-deltaprime", "url": "https://onchainattack.org/document/examples/2024-09-deltaprime/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--efa32df3-d547-5f1f-a9fc-b7d50f9cdf64", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "DEXX trading-bot platform compromise cohort — Solana + EVM — 2024-09 to 2024-11", "x_oak_date_prefix": "2024-09", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2024-09-dexx-cohort", "url": "https://onchainattack.org/document/examples/2024-09-dexx-cohort/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--659e61a5-2f99-5683-908a-cafb4234bd04", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "ENS DAO delegation-concentration governance dynamics — delegate voting-weight accumulation and proposal-outcome influence — Ethereum — 2023–2024", "x_oak_date_prefix": "2024-09", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2024-09-ens-dao-delegation-concentration", "url": "https://onchainattack.org/document/examples/2024-09-ens-dao-delegation-concentration/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--05360e76-38e1-5dc2-b5d1-e26dcfa4db31", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Indodax hot-wallet drain — multi-chain — 2024-09-11", "x_oak_date_prefix": "2024-09", "x_oak_attribution": "inferred-strong", "external_references": [ { "source_name": "oak", "external_id": "2024-09-indodax", "url": "https://onchainattack.org/document/examples/2024-09-indodax/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--e35d328a-5a51-5521-bfae-d103ad68f329", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Onyx Protocol empty-market rounding exploit — Ethereum — 2024-09-26", "x_oak_date_prefix": "2024-09", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2024-09-onyx", "url": "https://onchainattack.org/document/examples/2024-09-onyx/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--69a49888-2bed-55bd-81c9-b85138788f64", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Penpie Finance reward-claim exploit — Ethereum + Arbitrum — 2024-09-03", "x_oak_date_prefix": "2024-09", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2024-09-penpie", "url": "https://onchainattack.org/document/examples/2024-09-penpie/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--912bff97-5353-557f-8019-08dd70d1fe14", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Polymarket account takeover via third-party auth — Polygon — 2024-09", "x_oak_date_prefix": "2024-09", "x_oak_attribution": "inferred-strong", "external_references": [ { "source_name": "oak", "external_id": "2024-09-polymarket-magic-labs-takeover", "url": "https://onchainattack.org/document/examples/2024-09-polymarket-magic-labs-takeover/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--06a938e0-52d0-5b73-9932-4e845bf5342e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Solana Token-2022 PermanentDelegate burn-on-buy cohort — Solana — 2024-09 onward", "x_oak_date_prefix": "2024-09", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2024-09-solana-permanent-delegate-burn-on-buy-cohort", "url": "https://onchainattack.org/document/examples/2024-09-solana-permanent-delegate-burn-on-buy-cohort/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--994136f3-f2d2-5b57-89a6-556851609635", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Solana Token-2022 PermanentDelegate malicious-exercise cohort — Solana — 2024–2025", "x_oak_date_prefix": "2024-09", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2024-09-solana-token-2022-permanent-delegate-cohort", "url": "https://onchainattack.org/document/examples/2024-09-solana-token-2022-permanent-delegate-cohort/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--043cff6a-78de-55bf-b3ee-4a437c3ac79e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "WalletConnect-impersonating Google Play mobile drainer — Android/multi-chain — 2024-03 to 2024-09", "x_oak_date_prefix": "2024-09", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2024-09-walletconnect-google-play-drainer", "url": "https://onchainattack.org/document/examples/2024-09-walletconnect-google-play-drainer/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--2b1d9ac4-b588-56cf-b965-6d6dc9686921", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Inferno Drainer service ecosystem — multi-chain — operating ~2022 through November 2023 (Telegram-announced shutdown; affiliate / kit re-emergence under successor branding)", "x_oak_date_prefix": "2024-10", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2024-10-inferno-drainer-handover", "url": "https://onchainattack.org/document/examples/2024-10-inferno-drainer-handover/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--f24c6371-1dbc-5398-bd69-c4d3463a6094", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Operation Token Mirrors — FBI NexFundAI sting against crypto market-maker wash-trading-as-pump cohort — multi-CEX (centred on FBI-deployed token, NexFundAI on Ethereum) — initial charges 2024-10-09; guilty pleas + sentencings through 2025–2026", "x_oak_date_prefix": "2024-10", "x_oak_attribution": "confirmed", "external_references": [ { "source_name": "oak", "external_id": "2024-10-operation-token-mirrors-nexfundai", "url": "https://onchainattack.org/document/examples/2024-10-operation-token-mirrors-nexfundai/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--8a9ed543-4d4f-5dd0-bb5f-0255231c9909", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Radiant Capital cross-chain lending compromise — Arbitrum / BNB Chain — 2024-10-16", "x_oak_date_prefix": "2024-10", "x_oak_attribution": "confirmed", "external_references": [ { "source_name": "oak", "external_id": "2024-10-radiant-capital", "url": "https://onchainattack.org/document/examples/2024-10-radiant-capital/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--81ff48ff-c45b-5f99-91dd-68162295e703", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "$SHAR / Sharpei Solana memecoin funnel-collapse rug — Solana — 2024-10-23/24", "x_oak_date_prefix": "2024-10", "x_oak_attribution": "inferred-strong", "external_references": [ { "source_name": "oak", "external_id": "2024-10-sharpei-solana-funnel-collapse-rug", "url": "https://onchainattack.org/document/examples/2024-10-sharpei-solana-funnel-collapse-rug/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--306d3453-73b0-5ff4-83a1-24f602f0b0dc", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Tapioca DAO DSO logic flaw + key compromise — Arbitrum — 2024-10-18", "x_oak_date_prefix": "2024-10", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2024-10-tapioca", "url": "https://onchainattack.org/document/examples/2024-10-tapioca/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--c1dcc184-d6ec-549a-bd8e-fd8cfb984bac", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "MakerDAO / Sky brand-retention poll — vote dominated by four entities — Ethereum — 2024-11", "x_oak_date_prefix": "2024-11", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2024-11-makerdao-snapshot-governance-endgame-dispute", "url": "https://onchainattack.org/document/examples/2024-11-makerdao-snapshot-governance-endgame-dispute/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--4728bf1c-4b46-5942-adfd-15edd0812818", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Thala Labs farming-contract Move-language flaw — Aptos — 2024-11-15", "x_oak_date_prefix": "2024-11", "x_oak_attribution": "confirmed", "external_references": [ { "source_name": "oak", "external_id": "2024-11-thala", "url": "https://onchainattack.org/document/examples/2024-11-thala/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--2fcd4f03-702e-5ecb-96e7-929c744cda23", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "$HAWK / Hawk Tuah celebrity-memecoin sniper-distribution pump-and-dump — Solana — 2024-12", "x_oak_date_prefix": "2024-12", "x_oak_attribution": "inferred-strong", "external_references": [ { "source_name": "oak", "external_id": "2024-12-hawk-tuah-celebrity-memecoin", "url": "https://onchainattack.org/document/examples/2024-12-hawk-tuah-celebrity-memecoin/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--2cb0d582-38ac-58f3-9134-4ac6aded72e3", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Movement Network ($MOVE) market-maker insider dump — Binance / Coinbase — 2024-12", "x_oak_date_prefix": "2024-12", "x_oak_attribution": "confirmed", "external_references": [ { "source_name": "oak", "external_id": "2024-12-movement-move-otc-dump", "url": "https://onchainattack.org/document/examples/2024-12-movement-move-otc-dump/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--8cf8579e-04fc-56ba-b7df-22b8bef518a8", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Pudgy Penguins Google-Ads NFT-drainer phishing campaign — multi-chain (Ethereum-NFT-centric) — 2024-12", "x_oak_date_prefix": "2024-12", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2024-12-pudgy-penguins-google-ads-nft-drainer", "url": "https://onchainattack.org/document/examples/2024-12-pudgy-penguins-google-ads-nft-drainer/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--b86d3db0-5010-5234-8fb7-971c18d71a53", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "`@solana/web3.js` npm supply-chain compromise — Solana — 2024-12-03", "x_oak_date_prefix": "2024-12", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2024-12-solana-web3js-npm-supply-chain", "url": "https://onchainattack.org/document/examples/2024-12-solana-web3js-npm-supply-chain/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--e2ae6705-9a09-502f-9892-3bd8044a8ddc", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Organization-Targeted Phishing — 15+ X Accounts Compromised via Email Phishing — 2024-12", "x_oak_date_prefix": "2024-12", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2024-12-targeted-x-account-phishing-15-accounts", "url": "https://onchainattack.org/document/examples/2024-12-targeted-x-account-phishing-15-accounts/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--26c60d65-d771-592f-8bf5-f164ee64b603", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "DOJ/SEC Pig-Butchering Platform Enforcement Cohort — 2024–2025", "x_oak_date_prefix": "2024-20", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2024-2025-doj-sec-pig-butchering-enforcement-cohort", "url": "https://onchainattack.org/document/examples/2024-2025-doj-sec-pig-butchering-enforcement-cohort/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--551a745d-0cd3-509a-97dc-caafb98c32f7", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "EigenLayer restaking-frontend phishing cohort — Ethereum — 2024–2025", "x_oak_date_prefix": "2024-20", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2024-2025-eigenlayer-airdrop-staking-frontend-phishing-cohort", "url": "https://onchainattack.org/document/examples/2024-2025-eigenlayer-airdrop-staking-frontend-phishing-cohort/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--3e4ac61b-8e13-58f7-b41b-e38a4515df4d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "EigenLayer Restaking Deposit Caps and the ezETH Discount Depeg — Ethereum L1 — 2024", "x_oak_date_prefix": "2024-20", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2024-2025-eigenlayer-restaking-deposit-caps-lrt-nav-dilution", "url": "https://onchainattack.org/document/examples/2024-2025-eigenlayer-restaking-deposit-caps-lrt-nav-dilution/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--53095eb5-d9ee-5cca-b8b1-47c0b2b68655", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "EIP-7702 delegation abuse research and advisory cohort — Ethereum / multi-chain — 2024–2025 (pre-deployment and post-deployment advisory class)", "x_oak_date_prefix": "2024-20", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2024-2025-eip7702-delegation-abuse-research-advisory-cohort", "url": "https://onchainattack.org/document/examples/2024-2025-eip7702-delegation-abuse-research-advisory-cohort/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--ed27ae19-effb-56d9-bc1e-1bc81f94c10c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "John Daghita (\"Lick\") — US Government Seizure Address Theft — 2024–2025", "x_oak_date_prefix": "2024-20", "x_oak_attribution": "confirmed", "external_references": [ { "source_name": "oak", "external_id": "2024-2025-john-daghita-gov-seizure-theft", "url": "https://onchainattack.org/document/examples/2024-2025-john-daghita-gov-seizure-theft/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--0fa1dd74-b4d3-5188-83fa-f3092a7c231b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Polymarket Spec-Ambiguity Resolution Dispute Cohort — 2024–2025", "x_oak_date_prefix": "2024-20", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2024-2025-polymarket-spec-ambiguity-dispute-cohort", "url": "https://onchainattack.org/document/examples/2024-2025-polymarket-spec-ambiguity-dispute-cohort/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--005da7ab-366d-5d89-bd65-18ef9dff4b62", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Pump.fun bonding-curve memecoin rug-pull cohort — Solana — 2024-2025", "x_oak_date_prefix": "2024-20", "x_oak_attribution": "inferred-strong", "external_references": [ { "source_name": "oak", "external_id": "2024-2025-pump-fun-bonding-curve-rug-cohort", "url": "https://onchainattack.org/document/examples/2024-2025-pump-fun-bonding-curve-rug-cohort/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--75648516-7b11-5a36-9763-748c6305725e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Pump.fun / Solana token sandwiching cohort — Solana — 2024–2025", "x_oak_date_prefix": "2024-20", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2024-2025-pump-fun-solana-launch-sniping", "url": "https://onchainattack.org/document/examples/2024-2025-pump-fun-solana-launch-sniping/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--b39ada65-86c2-5c6b-b98d-f782c25103d2", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Safe ERC-4337 canonical module — optional-paymaster flaw in v0.1.0 — 2023-12 (testnet only) — $0", "x_oak_date_prefix": "2024-20", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2024-2025-safe-4337-module-integration-security-issues", "url": "https://onchainattack.org/document/examples/2024-2025-safe-4337-module-integration-security-issues/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--188cfdf4-c6e7-5b76-b8dc-f626cdf96c5d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Solana Token-2022 Multi-Extension Scam Token Cohort — 2024–2025", "x_oak_date_prefix": "2024-20", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2024-2025-solana-token-2022-multi-extension-scam-cohort", "url": "https://onchainattack.org/document/examples/2024-2025-solana-token-2022-multi-extension-scam-cohort/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--56e327fe-7c36-5e2f-81f6-cff0c972f7dc", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Solana Token-2022 transfer-hook class vulnerability and ZK-ElGamal proof zero-day — Solana — 2024-2025", "x_oak_date_prefix": "2024-20", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2024-2025-token-2022-transfer-hook-class-vulnerability", "url": "https://onchainattack.org/document/examples/2024-2025-token-2022-transfer-hook-class-vulnerability/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--4471c55b-5b54-55d8-80e8-487648612b2e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Uniswap Permit2 Phishing Cohort — Ethereum / multi-chain EVM — 2024–2025", "x_oak_date_prefix": "2024-20", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2024-2025-uniswap-permit2-phishing-cohort", "url": "https://onchainattack.org/document/examples/2024-2025-uniswap-permit2-phishing-cohort/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--a3b5820b-120f-5457-903d-dcc369725acc", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "US Treasury OFAC/IRS-CI blockchain analytics deployment — chain-agnostic — 2024–2025", "x_oak_date_prefix": "2024-20", "x_oak_attribution": "confirmed", "external_references": [ { "source_name": "oak", "external_id": "2024-2025-us-treasury-ofac-blockchain-analytics-tooling-cohort", "url": "https://onchainattack.org/document/examples/2024-2025-us-treasury-ofac-blockchain-analytics-tooling-cohort/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--12f43e50-a774-5b27-9d80-566d4ee9ffe8", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Embedded-Wallet and Trader-Tooling Supply-Chain Compromise Cohort — 2024–2026", "x_oak_date_prefix": "2024-20", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2024-2026-embedded-wallet-and-trader-tooling-supply-chain-cohort", "url": "https://onchainattack.org/document/examples/2024-2026-embedded-wallet-and-trader-tooling-supply-chain-cohort/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--6d95dc8f-7480-525d-beb6-b0615b46fff4", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "NFT Marketplace Insider Trading and Wash-Trading Infrastructure — 2024–2026 — structural", "x_oak_date_prefix": "2024-20", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2024-2026-nft-marketplace-insider-trading-wash-trading", "url": "https://onchainattack.org/document/examples/2024-2026-nft-marketplace-insider-trading-wash-trading/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--a90e843a-921e-58d3-8e5c-6d1672abb3bd", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Bittensor — Insider-Linked Exploit / Whitehat Recovery — 2024 / 2025-10", "x_oak_date_prefix": "2024", "x_oak_attribution": "confirmed", "external_references": [ { "source_name": "oak", "external_id": "2024-bittensor-insider-hack-nft-forensics", "url": "https://onchainattack.org/document/examples/2024-bittensor-insider-hack-nft-forensics/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--99890b5f-0b96-5511-bfe0-1ea06ad7d0ca", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Curio DAO MakerDAO fork-chain governance exploit — Ethereum — 2024-03-23", "x_oak_date_prefix": "2024", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2024-curio-makerdao-fork-chain", "url": "https://onchainattack.org/document/examples/2024-curio-makerdao-fork-chain/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--414f87d2-6756-553a-839d-a608a88065a8", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "EigenLayer restaking airdrop — AVS slashing and cascading-risk context — 2024", "x_oak_date_prefix": "2024", "x_oak_attribution": "confirmed", "external_references": [ { "source_name": "oak", "external_id": "2024-eigenlayer-restaking-airdrop", "url": "https://onchainattack.org/document/examples/2024-eigenlayer-restaking-airdrop/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--1a6da83d-33bf-514c-a9d0-833beb24b7ad", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "EigenLayer token-anticipation phishing campaign — 2024", "x_oak_date_prefix": "2024", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2024-eigenlayer-token-anticipation-phishing", "url": "https://onchainattack.org/document/examples/2024-eigenlayer-token-anticipation-phishing/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--779b7cd3-f2f2-5888-949b-0c13ecf52141", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Fake Ledger Live — Microsoft App Store — 2023-11", "x_oak_date_prefix": "2024", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2024-fake-ledger-live-microsoft-store", "url": "https://onchainattack.org/document/examples/2024-fake-ledger-live-microsoft-store/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--94bdfe1b-46db-566d-8c3f-bd71f738816e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Murad — $24M Meme Coin Insider Wallet Cluster — 2024", "x_oak_date_prefix": "2024", "x_oak_attribution": "confirmed", "external_references": [ { "source_name": "oak", "external_id": "2024-murad-memecoin-insider-wallets", "url": "https://onchainattack.org/document/examples/2024-murad-memecoin-insider-wallets/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--8c54c4c8-9fb8-56b9-94ca-b704331c7584", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Onyx Protocol year-plus fork-vulnerability exposure — Ethereum — 2024", "x_oak_date_prefix": "2024", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2024-onyx-protocol-year-plus-exposure", "url": "https://onchainattack.org/document/examples/2024-onyx-protocol-year-plus-exposure/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--9f758ada-ce7d-5d79-90f1-df12ac2bf694", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Sonne Finance VELO-market fork-vulnerability exploit — Optimism — 2024-05-14", "x_oak_date_prefix": "2024", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2024-sonne-finance-14-month-exposure", "url": "https://onchainattack.org/document/examples/2024-sonne-finance-14-month-exposure/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--1be3947f-926e-59c2-b9db-f194e6853399", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Counterfeit Ledger Nano S Plus hardware-wallet supply-chain compromise cohort — multi-chain — 2025 (cohort surfacing)", "x_oak_date_prefix": "2025-01", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2025-01-counterfeit-ledger-nano-s-plus-cohort", "url": "https://onchainattack.org/document/examples/2025-01-counterfeit-ledger-nano-s-plus-cohort/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--d813263d-13e3-5c00-920a-b94f81e38ac8", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Hayden Davis / Kelsier Ventures memecoin operator-cluster cohort — Solana — 2025-Q1", "x_oak_date_prefix": "2025-01", "x_oak_attribution": "confirmed", "external_references": [ { "source_name": "oak", "external_id": "2025-01-hayden-davis-kelsier-cluster", "url": "https://onchainattack.org/document/examples/2025-01-hayden-davis-kelsier-cluster/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--08a889eb-c45f-5a1e-a855-3336703206a5", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "David Balland (Ledger co-founder) kidnapping — crypto ransom, France — 2025-01", "x_oak_date_prefix": "2025-01", "x_oak_attribution": "confirmed", "external_references": [ { "source_name": "oak", "external_id": "2025-01-ledger-cofounder-balland-kidnapping", "url": "https://onchainattack.org/document/examples/2025-01-ledger-cofounder-balland-kidnapping/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--473a5e59-2f71-52cf-9cc9-0fac2945a328", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Mango Markets SEC settlement and protocol shutdown — Solana — 2024-09 to 2025-01", "x_oak_date_prefix": "2025-01", "x_oak_attribution": "confirmed", "external_references": [ { "source_name": "oak", "external_id": "2025-01-mango-markets-shutdown", "url": "https://onchainattack.org/document/examples/2025-01-mango-markets-shutdown/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--53c237bd-d459-5724-926e-3a9ded62d4ca", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "MEV-Boost relay censorship and OFAC-compliance validator concentration — Ethereum — 2025", "x_oak_date_prefix": "2025-01", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2025-01-mev-boost-relay-censorship", "url": "https://onchainattack.org/document/examples/2025-01-mev-boost-relay-censorship/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--efb74114-6b83-579c-96ad-29ba4bc61b73", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Phemex hot-wallet theft — multi-chain — 2025-01-23", "x_oak_date_prefix": "2025-01", "x_oak_attribution": "inferred-strong", "external_references": [ { "source_name": "oak", "external_id": "2025-01-phemex", "url": "https://onchainattack.org/document/examples/2025-01-phemex/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--e6b8949f-e1d6-5f47-97d7-ac0f8ae9327a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Prediction-market journalist safety / resolution-source intimidation cohort — global — 2026", "x_oak_date_prefix": "2025-01", "x_oak_attribution": "inferred-strong", "external_references": [ { "source_name": "oak", "external_id": "2025-01-prediction-market-journalist-safety-cohort", "url": "https://onchainattack.org/document/examples/2025-01-prediction-market-journalist-safety-cohort/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--0ea302e3-d920-55d7-8560-5c14a240adea", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "$TRUMP and $MELANIA presidential / first-spouse memecoin launches — Solana — 2025-01", "x_oak_date_prefix": "2025-01", "x_oak_attribution": "inferred-strong", "external_references": [ { "source_name": "oak", "external_id": "2025-01-trump-melania-presidential-memecoin", "url": "https://onchainattack.org/document/examples/2025-01-trump-melania-presidential-memecoin/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--25fe6d24-4133-557d-ae33-9138f74db17f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Bybit aftermath — \\$1.4B THORChain laundering — Ethereum → BTC / DAI — 2025-02 to 2025-03", "x_oak_date_prefix": "2025-02", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2025-02-bybit-thorchain-laundering", "url": "https://onchainattack.org/document/examples/2025-02-bybit-thorchain-laundering/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--a30a082c-da90-55b8-99b1-54b832e1d0d2", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Bybit cold-wallet theft — Ethereum — 2025-02-21", "x_oak_date_prefix": "2025-02", "x_oak_attribution": "confirmed", "external_references": [ { "source_name": "oak", "external_id": "2025-02-bybit", "url": "https://onchainattack.org/document/examples/2025-02-bybit/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--55394f26-9bad-5baa-8ebc-ae1355abbd20", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Cardex session-signer-key frontend leak — Abstract Chain — 2025-02-18", "x_oak_date_prefix": "2025-02", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2025-02-cardex-session-key-frontend-leak", "url": "https://onchainattack.org/document/examples/2025-02-cardex-session-key-frontend-leak/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--0ec08dc8-647b-5d3f-afcf-8040391ed1ba", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Infini neobank treasury drain — Ethereum / multi-chain — 2025-02-24", "x_oak_date_prefix": "2025-02", "x_oak_attribution": "confirmed", "external_references": [ { "source_name": "oak", "external_id": "2025-02-infini", "url": "https://onchainattack.org/document/examples/2025-02-infini/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--08fdc0fb-8695-5a6b-a38e-1ad295291bc1", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "$LIBRA / Milei presidential-endorsement pump-and-dump — Solana — 2025-02", "x_oak_date_prefix": "2025-02", "x_oak_attribution": "inferred-strong", "external_references": [ { "source_name": "oak", "external_id": "2025-02-libra-milei-presidential-pump-dump", "url": "https://onchainattack.org/document/examples/2025-02-libra-milei-presidential-pump-dump/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--34ea78e4-ac9e-5f15-9db7-1734a31b0e65", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Solana brand-X-account compromise cohort (Jupiter / Pump.fun / DogWifCoin) — Solana — 2024-11 to 2025-02", "x_oak_date_prefix": "2025-02", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2025-02-solana-x-account-compromise-cohort", "url": "https://onchainattack.org/document/examples/2025-02-solana-x-account-compromise-cohort/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--0d484de6-67e9-548c-a3bb-4b79f367d70f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "WEMIX — a developer uploads NFT-platform monitoring keys to a shared repository for convenience, and two months later 13 of 15 withdrawals empty the Play Bridge Vault — WEMIX / Wemade (Play Bridge Vault) — 2025-02-28", "x_oak_date_prefix": "2025-02", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2025-02-wemix-play-bridge-vault-shared-repo-key-compromise", "url": "https://onchainattack.org/document/examples/2025-02-wemix-play-bridge-vault-shared-repo-key-compromise/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--03943af6-56ff-534e-aa7b-1608d079df7b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "zkLend empty-market rounding-error exploit — Starknet — 2025-02-12", "x_oak_date_prefix": "2025-02", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2025-02-zklend", "url": "https://onchainattack.org/document/examples/2025-02-zklend/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--bda0dbeb-4284-5825-819b-0458d01532eb", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "1inch resolver-contract patch-not-propagated exploit — Ethereum + BNB Chain — 2025-03-05", "x_oak_date_prefix": "2025-03", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2025-03-1inch-resolver", "url": "https://onchainattack.org/document/examples/2025-03-1inch-resolver/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--8cb2fbdf-79e5-5ba7-8efd-33d149c045e8", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Hyperliquid JELLY self-liquidation + cross-venue spot-pump cascade — Hyperliquid (HyperEVM L1) + Solana spot — 2025-03-26", "x_oak_date_prefix": "2025-03", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2025-03-hyperliquid-jelly-self-liquidation-cross-venue", "url": "https://onchainattack.org/document/examples/2025-03-hyperliquid-jelly-self-liquidation-cross-venue/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--99d9f2dd-23d5-5a74-8fcf-dd9c1138f0b0", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Hyperliquid Whale — Illicit Trading via Highly Leveraged Positions — 2025-03", "x_oak_date_prefix": "2025-03", "x_oak_attribution": "inferred-weak", "external_references": [ { "source_name": "oak", "external_id": "2025-03-hyperliquid-whale-illicit-trading", "url": "https://onchainattack.org/document/examples/2025-03-hyperliquid-whale-illicit-trading/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--105c550e-d53d-5a36-b28f-49a123c0e921", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Polymarket UMA governance attack — Ukraine mineral deal market — 2025-03", "x_oak_date_prefix": "2025-03", "x_oak_attribution": "confirmed", "external_references": [ { "source_name": "oak", "external_id": "2025-03-polymarket-uma-ukraine-mineral-deal", "url": "https://onchainattack.org/document/examples/2025-03-polymarket-uma-ukraine-mineral-deal/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--012eeec8-d7b8-5f7a-94fb-f86fd6d8151b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Solflare base-x library homograph-attack vulnerability (CVE-2025-27611) — Solana — 2025-03", "x_oak_date_prefix": "2025-03", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2025-03-solflare-base-x-homograph-cve", "url": "https://onchainattack.org/document/examples/2025-03-solflare-base-x-homograph-cve/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--6415048c-5224-5269-a697-6117e7828d6e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "SushiSwap delegation-cluster governance takeover — Ethereum — 2025-03 to 2025-04", "x_oak_date_prefix": "2025-03", "x_oak_attribution": "confirmed", "external_references": [ { "source_name": "oak", "external_id": "2025-03-sushiswap-delegation-governance-takeover", "url": "https://onchainattack.org/document/examples/2025-03-sushiswap-delegation-governance-takeover/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--bce2e173-91f9-58b1-93c8-7d6dbb847cba", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "zkLend precision-loss collateral-accounting exploit — Starknet — 2025-02-12", "x_oak_date_prefix": "2025-03", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2025-03-zklend", "url": "https://onchainattack.org/document/examples/2025-03-zklend/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--915c2f49-a421-5e5f-a30d-17b07601b96a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "3520 BTC — Instant Exchange → Monero Laundering — 2025-04", "x_oak_date_prefix": "2025-04", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2025-04-3520-btc-instant-exchange-xmr-laundering", "url": "https://onchainattack.org/document/examples/2025-04-3520-btc-instant-exchange-xmr-laundering/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--9311f116-0e8d-5e95-bce7-224b257b9fce", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "EigenLayer Mainnet Slashing Launch and AVS Slashing-Condition Activation — Ethereum L1 — 2025-04-17", "x_oak_date_prefix": "2025-04", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2025-04-eigenlayer-mainnet-slashing-launch", "url": "https://onchainattack.org/document/examples/2025-04-eigenlayer-mainnet-slashing-launch/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--1113ead5-679d-5564-a0b4-3bd765cdb648", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "ERC-4337 paymaster compromise cohort — EVM mainnets — 2024–2025 (April 2025 anchor)", "x_oak_date_prefix": "2025-04", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2025-04-erc4337-paymaster", "url": "https://onchainattack.org/document/examples/2025-04-erc4337-paymaster/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--257a278b-0c9c-545f-808f-2880ffed0b70", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "eXch instant-exchange shutdown — Bybit-laundering substrate sanctions response — 2025-04 to 2025-05", "x_oak_date_prefix": "2025-04", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2025-04-exch-shutdown", "url": "https://onchainattack.org/document/examples/2025-04-exch-shutdown/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--7ef3644e-3a54-5f61-a359-2b48af684150", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "KiloEx oracle-feed manipulation — multi-chain (BNB Chain, Base, Manta, Taiko) — 2025-04-14", "x_oak_date_prefix": "2025-04", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2025-04-kiloex", "url": "https://onchainattack.org/document/examples/2025-04-kiloex/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--22fbf8c5-f050-5e67-a256-da0c3e8669d9", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Loopscale RateX-token-pricing exploit — Solana — 2025-04-26", "x_oak_date_prefix": "2025-04", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2025-04-loopscale", "url": "https://onchainattack.org/document/examples/2025-04-loopscale/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--5f26dbbc-f13d-5202-a6ea-639bf5e68903", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Mango Markets MNGO governance-token expiry and protocol wind-down — Solana — 2025-01", "x_oak_date_prefix": "2025-04", "x_oak_attribution": "confirmed", "external_references": [ { "source_name": "oak", "external_id": "2025-04-mango-markets-solana-governance", "url": "https://onchainattack.org/document/examples/2025-04-mango-markets-solana-governance/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--4f7bf872-470a-550e-ac0f-8341b9062b60", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Meteora M3M3 launch class-action and MET airdrop controversy — Solana — 2024-12 to 2025-10", "x_oak_date_prefix": "2025-04", "x_oak_attribution": "inferred-strong", "external_references": [ { "source_name": "oak", "external_id": "2025-04-meteora-m3m3-class-action", "url": "https://onchainattack.org/document/examples/2025-04-meteora-m3m3-class-action/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--1d4b5d8c-39b4-51a6-a201-a54d4e91d906", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "ZKsync unclaimed-airdrop pool drain — Ethereum / ZKsync Era — 2025-04-15", "x_oak_date_prefix": "2025-04", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2025-04-zksync-airdrop", "url": "https://onchainattack.org/document/examples/2025-04-zksync-airdrop/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--dd43a7d4-c748-5cfb-a87f-b012195f56e3", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Cetus Protocol concentrated-liquidity overflow exploit — Sui — 2025-05-22", "x_oak_date_prefix": "2025-05", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2025-05-cetus", "url": "https://onchainattack.org/document/examples/2025-05-cetus/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--940f0e40-d4d7-54a4-83e2-71fa159cc5fa", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "EIP-7702 CrimeEnjoyor delegation-phishing cohort — Ethereum mainnet — 2025-05 onward", "x_oak_date_prefix": "2025-05", "x_oak_attribution": "inferred-strong", "external_references": [ { "source_name": "oak", "external_id": "2025-05-eip7702-crimeenjoyor-delegation-phishing-cohort", "url": "https://onchainattack.org/document/examples/2025-05-eip7702-crimeenjoyor-delegation-phishing-cohort/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--92e5dfd0-8ece-518e-9949-8f8acabafcfc", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Inferno Drainer \"Reloaded\" — encrypted on-chain config + single-use smart contracts + fake CollabLand Discord phishing — multi-chain — September 2024 to March 2025 (Check Point disclosure 2025-05)", "x_oak_date_prefix": "2025-05", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2025-05-inferno-drainer-reloaded-encrypted-onchain-config", "url": "https://onchainattack.org/document/examples/2025-05-inferno-drainer-reloaded-encrypted-onchain-config/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--be64f59b-1486-5227-8579-03ab420fde4b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Force Bridge admin-key drainage — Ethereum / BNB Chain — 2025-06-01", "x_oak_date_prefix": "2025-06", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2025-06-force-bridge", "url": "https://onchainattack.org/document/examples/2025-06-force-bridge/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--9c866a99-20d9-56ac-aab0-ad8010e921d0", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Nobitex — multi-chain hot-wallet key compromise drains Iran's largest exchange — EVM chains + Tron — 2025-06-18", "x_oak_date_prefix": "2025-06", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2025-06-nobitex-hot-wallet-multi-chain-key-compromise", "url": "https://onchainattack.org/document/examples/2025-06-nobitex-hot-wallet-multi-chain-key-compromise/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--e53278dd-3b96-5d6a-8f42-2f4fa4d05c84", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Pepe Creator (Matt Furie) NFT contract hijack via fake-IT-worker social engineering — Ethereum — 2025-06-18 to 2025-06-25", "x_oak_date_prefix": "2025-06", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2025-06-pepe-creator-nft-contract-hijack", "url": "https://onchainattack.org/document/examples/2025-06-pepe-creator-nft-contract-hijack/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--1ea403f8-751a-5b3f-8621-87f821d189b6", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Resupply Finance wstUSR empty-market donation exploit — Ethereum — 2025-06-26", "x_oak_date_prefix": "2025-06", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2025-06-resupply-finance", "url": "https://onchainattack.org/document/examples/2025-06-resupply-finance/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--bffbbd30-7187-5a54-978b-e2d9880792d0", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Central Bank of Brazil — Service Provider Breach → Crypto Conversion — 2025-07", "x_oak_date_prefix": "2025-07", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2025-07-central-bank-brazil-breach-crypto-exit", "url": "https://onchainattack.org/document/examples/2025-07-central-bank-brazil-breach-crypto-exit/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--1a3327a2-8736-5138-b366-a786170d6547", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "CoinDCX operational-wallet drain — Solana — 2025-07-19", "x_oak_date_prefix": "2025-07", "x_oak_attribution": "inferred-strong", "external_references": [ { "source_name": "oak", "external_id": "2025-07-coindcx", "url": "https://onchainattack.org/document/examples/2025-07-coindcx/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--35d661da-f4b8-5d0a-a3f7-1a089af99f04", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "ALT Token — Influencer Insider Dump — 2025-07-14", "x_oak_date_prefix": "2025-07", "x_oak_attribution": "confirmed", "external_references": [ { "source_name": "oak", "external_id": "2025-07-crypto-beast-alt-insider-dump", "url": "https://onchainattack.org/document/examples/2025-07-crypto-beast-alt-insider-dump/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--403512a9-76ff-590c-964a-508d79dad58a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "GMX V1 GLP global-short-tracking exploit — Arbitrum — 2025-07-09", "x_oak_date_prefix": "2025-07", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2025-07-gmx-v1", "url": "https://onchainattack.org/document/examples/2025-07-gmx-v1/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--ea60fbbf-22df-554f-863c-01e5cb5c4dcb", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Lido stETH / Aave validator-exit-queue and looped-leverage depeg cascade — Ethereum L1 — 2025-07", "x_oak_date_prefix": "2025-07", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2025-07-lido-steth-aave-cascade", "url": "https://onchainattack.org/document/examples/2025-07-lido-steth-aave-cascade/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--f9e9c96e-5d5d-55c5-a139-9a5739f77289", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Polymarket Zelenskyy-suit market — UMA resolution-spec ambiguity — 2025-07", "x_oak_date_prefix": "2025-07", "x_oak_attribution": "inferred-strong", "external_references": [ { "source_name": "oak", "external_id": "2025-07-polymarket-zelenskyy-suit", "url": "https://onchainattack.org/document/examples/2025-07-polymarket-zelenskyy-suit/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--f445abe7-8d2d-592b-ad67-1cc460b67c26", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "BtcTurk hot-wallet drain (recurrence) — multi-chain — 2025-08-14", "x_oak_date_prefix": "2025-08", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2025-08-btcturk", "url": "https://onchainattack.org/document/examples/2025-08-btcturk/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--6a774ca5-45cc-5fa9-b93a-fc92d5f4aaaf", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Hypervault Finance exit scam via fake-audit-claims — Hyperliquid / Ethereum — 2025-09-25", "x_oak_date_prefix": "2025-08", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2025-08-hypervault-finance-exit-scam", "url": "https://onchainattack.org/document/examples/2025-08-hypervault-finance-exit-scam/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--fdd82ae4-28a8-5c4a-bc51-48b3b22d0b35", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "ERC-4337 EntryPoint griefing-vector responsible disclosure (TrustSec / HackenProof / Ethereum Foundation) — coordinated disclosure 2025-09 → patched in v0.9 — 2025", "x_oak_date_prefix": "2025-09", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2025-09-erc4337-entrypoint-v09-griefing-disclosure", "url": "https://onchainattack.org/document/examples/2025-09-erc4337-entrypoint-v09-griefing-disclosure/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--6834718b-cfa5-54dd-a294-420a55e162b2", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "SBI Crypto mining-pool drain — Bitcoin / multi-chain — 2025-09-24", "x_oak_date_prefix": "2025-09", "x_oak_attribution": "inferred-strong", "external_references": [ { "source_name": "oak", "external_id": "2025-09-sbi-crypto", "url": "https://onchainattack.org/document/examples/2025-09-sbi-crypto/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--a3851fe7-6ada-5195-ad9f-fbd506d80b47", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Shibarium bridge validator-key + flash-loan-amplified PoS-bridge exploit — Ethereum ↔ Shibarium — 2025-09-12", "x_oak_date_prefix": "2025-09", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2025-09-shibarium-bridge", "url": "https://onchainattack.org/document/examples/2025-09-shibarium-bridge/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--5379ddee-2501-5474-af7f-83b32079987a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "SSV Network correlated mass-slashing event — Ethereum Beacon Chain — 2025-09-10", "x_oak_date_prefix": "2025-09", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2025-09-ssv-network-mass-slashing", "url": "https://onchainattack.org/document/examples/2025-09-ssv-network-mass-slashing/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--9fce1657-3c87-54be-97a4-3c660d074335", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "SwissBorg SOL-Earn third-party-API supply-chain compromise — Solana — 2025-09-08", "x_oak_date_prefix": "2025-09", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2025-09-swissborg", "url": "https://onchainattack.org/document/examples/2025-09-swissborg/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--64598ab6-1a92-5ccd-bf38-93df973fe771", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "UXLINK multisig delegate-call hijack — Ethereum / Arbitrum — 2025-09-22", "x_oak_date_prefix": "2025-09", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2025-09-uxlink", "url": "https://onchainattack.org/document/examples/2025-09-uxlink/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--0df80b0c-efa7-5ed3-a52d-6c39284cc3db", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Garden Finance solver-key compromise — multi-chain — 2025-10-30", "x_oak_date_prefix": "2025-10", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2025-10-garden-finance", "url": "https://onchainattack.org/document/examples/2025-10-garden-finance/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--8405560b-b03c-52fc-96ac-91c083f3beb7", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Huione Group / Prince Group Southeast Asia compound-operated investment-fraud cohort — multi-chain (BTC / ETH / USDT on Tron dominant) — 2020–2025", "x_oak_date_prefix": "2025-10", "x_oak_attribution": "confirmed", "external_references": [ { "source_name": "oak", "external_id": "2025-10-huione-compound-fraud-cohort", "url": "https://onchainattack.org/document/examples/2025-10-huione-compound-fraud-cohort/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--ff7ff121-0821-52c9-a04a-8e53bba226df", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Polymarket POLY pre-token brand-anticipation phishing — EVM — 2025-10 onward", "x_oak_date_prefix": "2025-10", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2025-10-polymarket-pre-token-anticipation-phishing", "url": "https://onchainattack.org/document/examples/2025-10-polymarket-pre-token-anticipation-phishing/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--a1fe2b47-27fa-5449-b21b-3578ad128c72", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Balancer V2 ComposableStablePool rounding-error exploit — multi-chain — 2025-11-03", "x_oak_date_prefix": "2025-11", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2025-11-balancer-v2", "url": "https://onchainattack.org/document/examples/2025-11-balancer-v2/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--5241876f-f5d6-5478-9a00-606676d67af2", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Hyperliquid POPCAT spoofed-buy-wall + cancel-flood manipulation — Hyperliquid (HyperEVM L1) — 2025-11-12 to 2025-11-13", "x_oak_date_prefix": "2025-11", "x_oak_attribution": "inferred-strong", "external_references": [ { "source_name": "oak", "external_id": "2025-11-hyperliquid-popcat-spoof-and-pull", "url": "https://onchainattack.org/document/examples/2025-11-hyperliquid-popcat-spoof-and-pull/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--2c83a140-b4f0-56d6-9b97-a4a5a53ab5db", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Polymarket comment-section phishing campaign — Polygon — 2025-11", "x_oak_date_prefix": "2025-11", "x_oak_attribution": "inferred-strong", "external_references": [ { "source_name": "oak", "external_id": "2025-11-polymarket-comment-section-phishing", "url": "https://onchainattack.org/document/examples/2025-11-polymarket-comment-section-phishing/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--a9bc9cd3-6ed0-5f3d-a826-3bc090bf0c54", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "HNUT (Holly The Squirrel) bundled-rug Pull — Solana / Pump.fun — 2025-12-30", "x_oak_date_prefix": "2025-12", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2025-12-hnut-solana-bundled-rug", "url": "https://onchainattack.org/document/examples/2025-12-hnut-solana-bundled-rug/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--bf5e9b35-e7ec-553c-a91f-04a8734e6b1b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Polymarket UFO Declassification UMA Vote-Capture Dispute — 2025-12", "x_oak_date_prefix": "2025-12", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2025-12-polymarket-ufo-declassification-uma-vote-capture", "url": "https://onchainattack.org/document/examples/2025-12-polymarket-ufo-declassification-uma-vote-capture/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--635ac831-1c10-5c7b-a97f-3d0925323b96", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Unleash Protocol multisig governance hijack — Story Protocol — 2025-12-30", "x_oak_date_prefix": "2025-12", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2025-12-unleash-protocol", "url": "https://onchainattack.org/document/examples/2025-12-unleash-protocol/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--e419b0df-f583-5075-8e0e-d405b16629c7", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "USPD CPIMP \"Clandestine Proxy In the Middle of Proxy\" stablecoin exploit — Ethereum — admin-frontrun 2025-09-16; mint event 2025-12", "x_oak_date_prefix": "2025-12", "x_oak_attribution": "inferred-strong", "external_references": [ { "source_name": "oak", "external_id": "2025-12-uspd-cpimp-clandestine-proxy", "url": "https://onchainattack.org/document/examples/2025-12-uspd-cpimp-clandestine-proxy/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--74e4ea3c-f025-57bd-b461-17d6d2dc40e9", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Polymarket Subjective-Oracle Resolution Manipulation Cohort — 2025–2026", "x_oak_date_prefix": "2025-20", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2025-2026-polymarket-subjective-oracle-resolution-manipulation-cohort", "url": "https://onchainattack.org/document/examples/2025-2026-polymarket-subjective-oracle-resolution-manipulation-cohort/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--b313f45b-1458-5c00-b8e4-8e83dbab09cf", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Prediction-Market Resolution-Source Harassment Cohort — 2025–2026", "x_oak_date_prefix": "2025-20", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2025-2026-prediction-market-source-harassment-cohort", "url": "https://onchainattack.org/document/examples/2025-2026-prediction-market-source-harassment-cohort/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--1308fe73-04f5-5ad7-a6eb-844690181598", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Tangem card physical-access disclosures (Ledger Donjon) — hardware — 2025-09 → 2026-07", "x_oak_date_prefix": "2025-20", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2025-2026-tangem-donjon-physical-access-disclosures", "url": "https://onchainattack.org/document/examples/2025-2026-tangem-donjon-physical-access-disclosures/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--56a0c0db-844b-5633-b589-2684d40910ad", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Trezor-impersonating physical-mail seed-phrase phishing campaign — 2025–2026", "x_oak_date_prefix": "2025-20", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2025-2026-trezor-impersonating-physical-mail-campaign", "url": "https://onchainattack.org/document/examples/2025-2026-trezor-impersonating-physical-mail-campaign/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--95c5edeb-d47b-5a1b-8196-55a482466a79", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Axiom Exchange — Employee Insider Trading via Internal Data Access — 2025", "x_oak_date_prefix": "2025", "x_oak_attribution": "confirmed", "external_references": [ { "source_name": "oak", "external_id": "2025-axiom-exchange-insider-trading", "url": "https://onchainattack.org/document/examples/2025-axiom-exchange-insider-trading/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--7e86099f-d1e4-57ba-ada7-9b9b9ef2cbff", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "2025 Rekt.Uncovered Incidents Cohort — 23 Incidents — Aggregate ~$14.2B (incl. Lubian $14.8B legacy) / ~$297M excl. Lubian", "x_oak_date_prefix": "2025", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2025-rekt-uncovered-incidents-cohort", "url": "https://onchainattack.org/document/examples/2025-rekt-uncovered-incidents-cohort/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--b5e13f2f-bc50-57e1-a431-eb3cec464128", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Hardware Wallet Social Engineering — LTC/BTC — 2026-01-10", "x_oak_date_prefix": "2026-01", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2026-01-hardware-wallet-social-engineering", "url": "https://onchainattack.org/document/examples/2026-01-hardware-wallet-social-engineering/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--e1cdfcca-6fef-5d6a-a442-a37e0b8f3c70", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "IPOR Fusion — the admin account had delegated itself to a contract that would call anything, and a legacy vault would run any module it was handed — IPOR Fusion PlasmaVault / Arbitrum — 2026-01-06", "x_oak_date_prefix": "2026-01", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2026-01-ipor-fusion-plasmavault-eip7702-admin-delegation-malicious-fuse", "url": "https://onchainattack.org/document/examples/2026-01-ipor-fusion-plasmavault-eip7702-admin-delegation-malicious-fuse/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--5fb96e17-5424-5d92-8882-fa7ef94ec8d9", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Polycule trading bot — third-party brand-impersonation soft rug — 2026-01", "x_oak_date_prefix": "2026-01", "x_oak_attribution": "inferred-strong", "external_references": [ { "source_name": "oak", "external_id": "2026-01-polymarket-polycule-bot", "url": "https://onchainattack.org/document/examples/2026-01-polymarket-polycule-bot/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--1ba6dfec-0831-58ff-a8ce-316d348322b5", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Polymarket trader-tooling supply-chain compromise — npm + GitHub — 2026-01", "x_oak_date_prefix": "2026-01", "x_oak_attribution": "inferred-strong", "external_references": [ { "source_name": "oak", "external_id": "2026-01-polymarket-trader-tooling-supply-chain", "url": "https://onchainattack.org/document/examples/2026-01-polymarket-trader-tooling-supply-chain/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--c052095c-c86c-522e-9e1a-ac3f1eed2a4b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Polymarket Venezuela / Maduro-capture market — operational-insider trading by US Special Forces NCO — 2026-01", "x_oak_date_prefix": "2026-01", "x_oak_attribution": "confirmed", "external_references": [ { "source_name": "oak", "external_id": "2026-01-polymarket-venezuela-maduro-soldier-insider", "url": "https://onchainattack.org/document/examples/2026-01-polymarket-venezuela-maduro-soldier-insider/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--94169a6c-a389-59d5-b8a0-f57b092d723c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "\"120 Hours\" — the creator told a livestream audience he had five days to live, waited for the token to reach Raydium, and pulled the liquidity while still on camera — pump.fun / Solana — 2026-02-09", "x_oak_date_prefix": "2026-02", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2026-02-120-hours-pumpfun-livestream-sympathy-pretext-lp-drain", "url": "https://onchainattack.org/document/examples/2026-02-120-hours-pumpfun-livestream-sympathy-pretext-lp-drain/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--0df5a10d-11e9-5b09-b1cf-5b92d576a04f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Polymarket Iran-strike timing market — operational-insider trading by IDF Air Force reservist — 2026-02", "x_oak_date_prefix": "2026-02", "x_oak_attribution": "confirmed", "external_references": [ { "source_name": "oak", "external_id": "2026-02-polymarket-iran-strike-idf-reservist-insider", "url": "https://onchainattack.org/document/examples/2026-02-polymarket-iran-strike-idf-reservist-insider/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--b20287bf-48ab-5d7c-a2d9-08b01dab43f1", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Veil Cash — the verifying key set delta equal to gamma, so the pairing equation accepted proofs nobody had to compute — Veil Cash / Base — 2026-02-20", "x_oak_date_prefix": "2026-02", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2026-02-veil-cash-groth16-verifying-key-delta-gamma-forgery", "url": "https://onchainattack.org/document/examples/2026-02-veil-cash-groth16-verifying-key-delta-gamma-forgery/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--e48690f3-df76-54f0-9bc5-918b1ecbfdda", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Aave wstETH Oracle Misconfiguration Liquidation Cascade — Mar 2026 — $27.78M", "x_oak_date_prefix": "2026-03", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2026-03-aave-wsteth-oracle-misconfiguration-liquidation", "url": "https://onchainattack.org/document/examples/2026-03-aave-wsteth-oracle-misconfiguration-liquidation/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--1932cbf3-564a-5871-9e52-c366de3744f2", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Gondi — a bundler released three weeks earlier never checked who was calling it, and 78 NFTs left wallets whose loans had already closed — Gondi V3 / Ethereum — 2026-03-09", "x_oak_date_prefix": "2026-03", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2026-03-gondi-purchasebundler-missing-caller-check-nft-approval-drain", "url": "https://onchainattack.org/document/examples/2026-03-gondi-purchasebundler-missing-caller-check-nft-approval-drain/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--ff017ac7-085e-5e25-92ab-7180d7ecaef2", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Lido — six validators from a permissionless operator were slashed, and the loss stopped at that operator's bond instead of reaching stakers — Lido Community Staking Module / Ethereum — 2026-03-13", "x_oak_date_prefix": "2026-03", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2026-03-lido-csm-operator-bond-absorbs-validator-slashing", "url": "https://onchainattack.org/document/examples/2026-03-lido-csm-operator-bond-absorbs-validator-slashing/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--e5a81466-dc88-5ffa-aeb5-8b6b007e16f7", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Panic-Account Farm — $0 Direct Loss / Scam Traffic Funnel via Doomposting — 2026-03", "x_oak_date_prefix": "2026-03", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2026-03-panic-account-farm-scam-funnel", "url": "https://onchainattack.org/document/examples/2026-03-panic-account-farm-scam-funnel/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--bc2e5973-68ab-502b-ad3e-4fbe29c1627a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Polymarket Iran-strike market — physical coercion of resolution source — 2026-03", "x_oak_date_prefix": "2026-03", "x_oak_attribution": "confirmed", "external_references": [ { "source_name": "oak", "external_id": "2026-03-polymarket-iran-strike-journalist-coercion", "url": "https://onchainattack.org/document/examples/2026-03-polymarket-iran-strike-journalist-coercion/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--9bf4cd7b-b861-5830-9e52-db42657a9865", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Resolv Labs Private-Key Compromise and Unlimited USR Mint — Mar 2026 — $25M", "x_oak_date_prefix": "2026-03", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2026-03-resolv-labs-usr-unlimited-mint-key-compromise", "url": "https://onchainattack.org/document/examples/2026-03-resolv-labs-usr-unlimited-mint-key-compromise/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--b28552b6-0f43-5cd5-ae0f-b8886a9b5461", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Solana permissioned tokens — since March 2026 a regulated fund and a honeypot have the same on-chain shape, and only the freeze authority's owner separates them — Token ACL (sRFC-37) / Solana — 2026-03-06 onward", "x_oak_date_prefix": "2026-03", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2026-03-solana-token-acl-permissioned-token-honeypot-collision", "url": "https://onchainattack.org/document/examples/2026-03-solana-token-acl-permissioned-token-honeypot-collision/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--c0eff40e-6b7a-5a48-88e1-2fec0d9d6ebc", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Venus Protocol Supply-Cap Donation-Attack Exploit — BNB Chain — 2026-03-15", "x_oak_date_prefix": "2026-03", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2026-03-venus-protocol-supply-cap-donation-attack", "url": "https://onchainattack.org/document/examples/2026-03-venus-protocol-supply-cap-donation-attack/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--55a04d90-f025-51fb-9f6e-9ebd9eeb482a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Drift Protocol durable-nonce admin-takeover and fictitious-collateral drain — Solana — 2026-04-01", "x_oak_date_prefix": "2026-04", "x_oak_attribution": "inferred-strong", "external_references": [ { "source_name": "oak", "external_id": "2026-04-drift-protocol-durable-nonces-dprk", "url": "https://onchainattack.org/document/examples/2026-04-drift-protocol-durable-nonces-dprk/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--5ecc3958-6f4f-5ff9-b852-9a59b78c792a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Hyperbridge Merkle-proof forgery and counterfeit-DOT mint — Polkadot ⇄ Ethereum / Base / BNB / Arbitrum — 2026-04-13", "x_oak_date_prefix": "2026-04", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2026-04-hyperbridge-merkle-proof-counterfeit-mint", "url": "https://onchainattack.org/document/examples/2026-04-hyperbridge-merkle-proof-counterfeit-mint/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--4ada26d3-7a7c-5e02-a43a-043186e22802", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "KelpDAO rsETH — nobody stole a signing key; the verifier signed honestly over a chain it was being lied to about — KelpDAO rsETH / LayerZero OFT / Unichain → Ethereum — 2026-04-18", "x_oak_date_prefix": "2026-04", "x_oak_attribution": "confirmed", "external_references": [ { "source_name": "oak", "external_id": "2026-04-kelpdai-rseth-bridge-layerzero-compromise", "url": "https://onchainattack.org/document/examples/2026-04-kelpdai-rseth-bridge-layerzero-compromise/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--bb453665-7ab3-5af7-8d08-8367845d18fb", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "RAVE Token — -95% Market Manipulation / CEX Intervention — 2026-04", "x_oak_date_prefix": "2026-04", "x_oak_attribution": "inferred-strong", "external_references": [ { "source_name": "oak", "external_id": "2026-04-rave-market-manipulation-cex-intervention", "url": "https://onchainattack.org/document/examples/2026-04-rave-market-manipulation-cex-intervention/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--eac433f0-af30-5b04-8b99-a751a33f55d7", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "RaveDAO ($RAVE) insider OTC distribution and coordinated dump — Multi-CEX (Binance / Bitget / Gate) — 2026-04", "x_oak_date_prefix": "2026-04", "x_oak_attribution": "inferred-strong", "external_references": [ { "source_name": "oak", "external_id": "2026-04-ravedao-otc-pump-dump", "url": "https://onchainattack.org/document/examples/2026-04-ravedao-otc-pump-dump/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--2cf79f32-89bc-572c-b4d6-d3018736387f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Rhea Finance Margin-Parser Exploit — Apr 2026 — $18.4M", "x_oak_date_prefix": "2026-04", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2026-04-rhea-finance-margin-parser-exploit", "url": "https://onchainattack.org/document/examples/2026-04-rhea-finance-margin-parser-exploit/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--5368e7c1-b6ca-5dfa-8eb7-2bb9e08d51d4", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Volo Admin-Key Social-Engineering Compromise — Sui — 2026-04-21", "x_oak_date_prefix": "2026-04", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2026-04-volo-admin-key-social-engineering", "url": "https://onchainattack.org/document/examples/2026-04-volo-admin-key-social-engineering/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--0bfd756b-68a3-5522-bab5-898bccd80249", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Wasabi Protocol UUPS Proxy-Upgrade Admin-Key Exploit — Apr 2026 — ~$4.5–5.5M", "x_oak_date_prefix": "2026-04", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2026-04-wasabi-protocol-uups-proxy-admin-key-exploit", "url": "https://onchainattack.org/document/examples/2026-04-wasabi-protocol-uups-proxy-admin-key-exploit/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--49dcbbb6-12fe-5091-be8b-b59332754d57", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Zondacrypto Exchange CEO-Transition Custody Failure and Alleged Russian Mafia Takeover — Apr 2026 — ~$96M", "x_oak_date_prefix": "2026-04", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2026-04-zondacrypto-ceo-custody-key-failure", "url": "https://onchainattack.org/document/examples/2026-04-zondacrypto-ceo-custody-key-failure/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--41a5517b-9810-57a4-8465-5b6835234332", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Dritan Kapllani Jr — Social Engineering Theft — 2024–2026", "x_oak_date_prefix": "2026-05", "x_oak_attribution": "confirmed", "external_references": [ { "source_name": "oak", "external_id": "2026-05-dritan-kapllani-social-engineering", "url": "https://onchainattack.org/document/examples/2026-05-dritan-kapllani-social-engineering/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--5b9ab567-2ef6-5ace-a85d-e94977d85ee0", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "DSJ Exchange (DSJEX) — Ponzi Collapse — 2026-04/05", "x_oak_date_prefix": "2026-05", "x_oak_attribution": "confirmed", "external_references": [ { "source_name": "oak", "external_id": "2026-05-dsj-exchange-ponzi-collapse", "url": "https://onchainattack.org/document/examples/2026-05-dsj-exchange-ponzi-collapse/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--29c3b3d2-4c4d-5e84-8c98-4a342d51b467", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "DxSale — legacy BNB-Chain liquidity-locker backdoor (`setFee`→1 wei + obscured ownership) — 2026-05-29", "x_oak_date_prefix": "2026-05", "x_oak_attribution": "inferred-weak", "external_references": [ { "source_name": "oak", "external_id": "2026-05-dxsale-legacy-locker-backdoor", "url": "https://onchainattack.org/document/examples/2026-05-dxsale-legacy-locker-backdoor/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--6224c74f-f287-5160-a0ac-a99ade677ec9", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "EchoProtocol eBTC Bridge Signature-Verification Bypass and Unbounded Mint — Monad — 2026-05-19", "x_oak_date_prefix": "2026-05", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2026-05-echoprotocol-ebtc-bridge-message-forgery", "url": "https://onchainattack.org/document/examples/2026-05-echoprotocol-ebtc-bridge-message-forgery/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--6c88a534-36dd-5d65-936b-f8c672587791", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Ill Bloom — recovery phrases from less-common mobile wallets were generated by an insecure PRNG, and 431 accounts across five chains were swept in one coordinated action — multi-wallet cohort (multi-chain) — first sweep 2026-05-27, disclosed July 2026, root cause named 2026-08-05 as `CryptoJS.lib.WordArray.random()` (CVE-2026-71851)", "x_oak_date_prefix": "2026-05", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2026-05-ill-bloom-mobile-wallet-weak-prng-recovery-phrase-sweep", "url": "https://onchainattack.org/document/examples/2026-05-ill-bloom-mobile-wallet-weak-prng-recovery-phrase-sweep/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--3464316b-c821-5a87-acbd-851ddcca8f2c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Kraken / Coinbase users — coordinated physical-coercion + wallet-compromise theft — 2026-05", "x_oak_date_prefix": "2026-05", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2026-05-kraken-coinbase-coordinated-physical-wallet-compromise", "url": "https://onchainattack.org/document/examples/2026-05-kraken-coinbase-coordinated-physical-wallet-compromise/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--04196fc7-e671-5f59-98f9-418975e7c4f9", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "LAB and the Bitget market-maker cohort — four launches where insiders held almost the whole supply and one venue sat in the middle of all of them — LAB / RAVE / RIVER / SIREN — 2026-03 → 2026-07", "x_oak_date_prefix": "2026-05", "x_oak_attribution": "inferred-strong", "external_references": [ { "source_name": "oak", "external_id": "2026-05-lab-bitget-market-maker-insider-supply-cohort", "url": "https://onchainattack.org/document/examples/2026-05-lab-bitget-market-maker-insider-supply-cohort/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--185586a3-f9db-5a0a-965d-23938dc95a27", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "LABtrade — Insider OTC/Vesting/Supply Manipulation — 2026-05-14", "x_oak_date_prefix": "2026-05", "x_oak_attribution": "confirmed", "external_references": [ { "source_name": "oak", "external_id": "2026-05-labtrade-insider-manipulation", "url": "https://onchainattack.org/document/examples/2026-05-labtrade-insider-manipulation/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--11dc673c-a030-5bea-969a-81c662707a13", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "MAP Protocol — Butter Bridge `abi.encodePacked` hash-collision + retry-message replay — 2026-05-20", "x_oak_date_prefix": "2026-05", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2026-05-map-protocol-butter-bridge-encodepacked-collision", "url": "https://onchainattack.org/document/examples/2026-05-map-protocol-butter-bridge-encodepacked-collision/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--47f69d28-12fe-573a-9b4f-a02edd02140c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Nx Console VS Code extension — trojanised release (`nrwl.angular-console` v18.95.0) credential stealer — 2026-05-18", "x_oak_date_prefix": "2026-05", "x_oak_attribution": "inferred-strong", "external_references": [ { "source_name": "oak", "external_id": "2026-05-nx-console-vscode-extension-supply-chain-compromise", "url": "https://onchainattack.org/document/examples/2026-05-nx-console-vscode-extension-supply-chain-compromise/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--de200971-924d-52e7-afbc-b8321305cb29", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "RetoSwap / Haveno — unauthenticated ACK → arbitrator impersonation → 2-of-3 multisig instantiation hijack — 2026-05-21", "x_oak_date_prefix": "2026-05", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2026-05-retoswap-haveno-arbitrator-ack-spoof-multisig-hijack", "url": "https://onchainattack.org/document/examples/2026-05-retoswap-haveno-arbitrator-ack-spoof-multisig-hijack/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--ee5db7c8-0258-52cc-a6f3-1e2dfaa1590d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Roaring Kitty (@TheRoaringKitty) — verified X-account compromise → $RKC Pump.fun memecoin — 2026-05-11", "x_oak_date_prefix": "2026-05", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2026-05-roaring-kitty-x-account-compromise-rkc-memecoin", "url": "https://onchainattack.org/document/examples/2026-05-roaring-kitty-x-account-compromise-rkc-memecoin/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--9aa03626-6f7b-5e91-93ba-98a14cb079d7", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "SquidRouterModule — counterfeit Safe module with public-constant-string \"authorization\" — 2026-05-25", "x_oak_date_prefix": "2026-05", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2026-05-squidroutermodule-safe-module-constant-string-authorization", "url": "https://onchainattack.org/document/examples/2026-05-squidroutermodule-safe-module-constant-string-authorization/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--2f732f5a-3ec1-5a5f-8fad-e621241f3e15", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Stake DAO — deployer-key compromise → LayerZero OFT peer redirect → 5.4T vsdCRV mint — 2026-05-27", "x_oak_date_prefix": "2026-05", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2026-05-stake-dao-vsdcrv-layerzero-oft-peer-redirect", "url": "https://onchainattack.org/document/examples/2026-05-stake-dao-vsdcrv-layerzero-oft-peer-redirect/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--feabd215-b22b-590a-be74-99aabc235c5c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Superfortune ($GUA) — multisig airdrop-transfer destination tampering to a lookalike address — 2026-05-27", "x_oak_date_prefix": "2026-05", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2026-05-superfortune-gua-multisig-destination-tampering", "url": "https://onchainattack.org/document/examples/2026-05-superfortune-gua-multisig-destination-tampering/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--f7353939-84d2-5ebc-8917-897507df819d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "THORChain — a node that joined two days earlier failed 864 signing rounds on purpose, collected leaked key fragments, and reconstructed a vault's private key — THORChain / Ethereum, BSC, Base, Bitcoin, Avalanche, Tron and others — 2026-05-15", "x_oak_date_prefix": "2026-05", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2026-05-thorchain-router-exploit", "url": "https://onchainattack.org/document/examples/2026-05-thorchain-router-exploit/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--84099786-6523-5475-8a94-90d761197050", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "TrustedVolumes RFQ Authorization-Boundary Failure — Ethereum — 2026-05-07", "x_oak_date_prefix": "2026-05", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2026-05-trustedvolumes-rfq-authorization-failure", "url": "https://onchainattack.org/document/examples/2026-05-trustedvolumes-rfq-authorization-failure/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--1e2245b5-d004-5853-b73c-13cc7168a217", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Verus ⇄ Ethereum Bridge — missing source-amount validation (`checkCCEValues`) — 2026-05-18", "x_oak_date_prefix": "2026-05", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2026-05-verus-ethereum-bridge-source-amount-validation", "url": "https://onchainattack.org/document/examples/2026-05-verus-ethereum-bridge-source-amount-validation/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--16367484-f36b-5c57-bb18-ca348864f7eb", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Aztec deprecated rollup infrastructure — forged rollup proofs drain two immutable, abandoned bridges within a week — Ethereum — 2026-06 (≈06-14 and ≈06-17) (cohort)", "x_oak_date_prefix": "2026-06", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2026-06-aztec-deprecated-rollup-forged-proof-cohort", "url": "https://onchainattack.org/document/examples/2026-06-aztec-deprecated-rollup-forged-proof-cohort/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--6c14be40-1179-5a20-9565-5aafdb097c6e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "CryptoBandits — USB-worm crypto-clipper with Tor C2 and clipboard secret-harvesting — Windows / cross-chain — disclosed 2026-06-17", "x_oak_date_prefix": "2026-06", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2026-06-cryptobandits-usb-worm-tor-clipper", "url": "https://onchainattack.org/document/examples/2026-06-cryptobandits-usb-worm-tor-clipper/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--9f74e5d8-ae18-5e08-9ebe-23bf9a3bd57e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "\"Eleven drainer\" injected into legitimate project subdomains — Gitcoin and Yield Yak — Ethereum / Avalanche — 2026-06 (June 21 and 24)", "x_oak_date_prefix": "2026-06", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2026-06-eleven-drainer-legit-subdomain-frontend-compromise-cohort", "url": "https://onchainattack.org/document/examples/2026-06-eleven-drainer-legit-subdomain-frontend-compromise-cohort/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--811238c1-106c-52c5-bf1e-80c753043075", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Flooring Protocol — a crafted high-bit token-ID alias made an ownership check pass for a token the caller did not own, and the balance update behind it underflowed, turning a little WETH into effectively unlimited fpTokens — Flooring Protocol V2 / BitmapPunks (Ethereum) — 2026-06-08", "x_oak_date_prefix": "2026-06", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2026-06-flooring-protocol-bt404-ghost-ownership-underflow", "url": "https://onchainattack.org/document/examples/2026-06-flooring-protocol-bt404-ghost-ownership-underflow/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--68a9f223-bfaa-5f44-b875-7d179fd7a7f6", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Gnosis Pay — Zodiac Delay/Roles modifier fallback-handler bypass — 2026-06-01", "x_oak_date_prefix": "2026-06", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2026-06-gnosis-pay-zodiac-delay-module-fallback-handler-bypass", "url": "https://onchainattack.org/document/examples/2026-06-gnosis-pay-zodiac-delay-module-fallback-handler-bypass/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--c39211f1-85be-59d7-ac2d-ff69371a43c5", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Humanity Protocol ($H) — single developer-machine compromise defeats two multisig quorums across two chains — Ethereum + BNB Chain — 2026-06-08/09", "x_oak_date_prefix": "2026-06", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2026-06-humanity-protocol-developer-machine-multisig-quorum-compromise", "url": "https://onchainattack.org/document/examples/2026-06-humanity-protocol-developer-machine-multisig-quorum-compromise/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--f5d03a49-3764-5b06-a93b-cade0e577aae", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "jaredfromsubway.eth — a counter-MEV honeypot lures the sandwich bot into leaving standing token allowances, then sweeps them — Ethereum — 2026-06-20", "x_oak_date_prefix": "2026-06", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2026-06-jaredfromsubway-mev-bot-counter-mev-honeypot-allowance-drain", "url": "https://onchainattack.org/document/examples/2026-06-jaredfromsubway-mev-bot-counter-mev-honeypot-allowance-drain/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--3af92b6a-fc9a-515d-8439-bebd482c364b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Joe Agent ($JOE) — `_removeLiquidityViaContract` single-function reentrancy — 2026-06", "x_oak_date_prefix": "2026-06", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2026-06-joe-agent-removeliquidity-reentrancy", "url": "https://onchainattack.org/document/examples/2026-06-joe-agent-removeliquidity-reentrancy/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--944f9a9e-504c-526a-96c1-0aa50ef4f25b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "mySwap CL — a fake \"EVIL\" token abuses shared-vault concentrated-liquidity accounting to drain residual LP — Starknet — 2026-06-19", "x_oak_date_prefix": "2026-06", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2026-06-myswap-cl-starknet-fake-token-shared-vault-accounting-drain", "url": "https://onchainattack.org/document/examples/2026-06-myswap-cl-starknet-fake-token-shared-vault-accounting-drain/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--86268bbc-efb7-5a80-b571-0866c168b169", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Namada — an IBC transfer-logic flaw drains the Multi-Asset Shielded Pool while a stale indexer masks the loss — Namada (Cosmos / IBC) — 2026-06-19", "x_oak_date_prefix": "2026-06", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2026-06-namada-masp-ibc-transfer-logic-shielded-drain", "url": "https://onchainattack.org/document/examples/2026-06-namada-masp-ibc-transfer-logic-shielded-drain/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--bdabd8cc-8cba-5251-9d4b-2fd59d6f6353", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "OpenMonero — server misconfiguration exposes wallet-RPC, hot wallet drained — Monero — 2026-06-08", "x_oak_date_prefix": "2026-06", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2026-06-openmonero-server-misconfig-wallet-rpc-hot-wallet-drain", "url": "https://onchainattack.org/document/examples/2026-06-openmonero-server-misconfig-wallet-rpc-hot-wallet-drain/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--d0828f39-53fb-5f90-8e08-23131dc787b5", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Polymarket — a compromised third-party frontend vendor injects wallet-draining JavaScript into the live site — Polygon / Ethereum — 2026-06-25", "x_oak_date_prefix": "2026-06", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2026-06-polymarket-frontend-vendor-js-injection-approval-drain", "url": "https://onchainattack.org/document/examples/2026-06-polymarket-frontend-vendor-js-injection-approval-drain/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--861f4092-2408-507c-bcd4-51f4c249ee0a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Rust crypto-clipper — fake-reputation \"Ghost Network\" distribution of trojanised trading tools — Windows + macOS / cross-chain — disclosed 2026-06-17", "x_oak_date_prefix": "2026-06", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2026-06-rust-clipper-fake-reputation-ghost-network", "url": "https://onchainattack.org/document/examples/2026-06-rust-clipper-fake-reputation-ghost-network/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--61eb23a3-4aa6-5820-9258-65de9a30bea4", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "SecondFi — predictable web-wallet key generation drains Cardano (ADA) wallets — Cardano — 2026-06-23", "x_oak_date_prefix": "2026-06", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2026-06-secondfi-cardano-web-wallet-predictable-key-generation-drain", "url": "https://onchainattack.org/document/examples/2026-06-secondfi-cardano-web-wallet-predictable-key-generation-drain/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--24498991-b5a5-5ac7-b595-b0f8646a857b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Secret Network — a forked CW20-ICS20 bridge contract skips source-channel and escrow checks, minting unbacked tokens redeemed over the real Axelar route — Secret Network / Axelar (Cosmos IBC) — 2026-06-10", "x_oak_date_prefix": "2026-06", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2026-06-secret-network-axelar-ics20-forged-ibc-packet-unbacked-mint", "url": "https://onchainattack.org/document/examples/2026-06-secret-network-axelar-ics20-forged-ibc-packet-unbacked-mint/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--074e61da-7a38-5e76-b2ef-2c50118f4224", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Steam Workshop / Wallpaper Engine malicious wallpapers — Lumma + Vidar infostealers harvesting Steam sessions and crypto wallets — Windows / cross-chain — disclosed 2026-06-16", "x_oak_date_prefix": "2026-06", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2026-06-steam-workshop-wallpaper-engine-infostealer", "url": "https://onchainattack.org/document/examples/2026-06-steam-workshop-wallpaper-engine-infostealer/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--bf62e56b-1c77-538c-98e7-4b0168dfee5d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Syscoin bridge — SPV-proof-parsing flaw mints ~5B SYS without a burn — Syscoin UTXO ⇄ NEVM — 2026-06-07", "x_oak_date_prefix": "2026-06", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2026-06-syscoin-bridge-spv-proof-parsing-unauthorized-mint", "url": "https://onchainattack.org/document/examples/2026-06-syscoin-bridge-spv-proof-parsing-unauthorized-mint/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--13c8d376-4d35-5ff3-aa59-8eb650be2414", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Taiko bridge — a leaked SGX prover signing key forges L2-state proofs to drain the L1 bridge — Ethereum L1 ⇄ Taiko Alethia L2 — 2026-06-21", "x_oak_date_prefix": "2026-06", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2026-06-taiko-bridge-leaked-sgx-prover-key-forged-proof-withdrawal", "url": "https://onchainattack.org/document/examples/2026-06-taiko-bridge-leaked-sgx-prover-key-forged-proof-withdrawal/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--e123ebc8-6d8a-588c-a72c-4d35a365f709", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "TesseraDAO ($TSR) — admin-key compromise → unauthorised mint-and-dump — 2026-06-01", "x_oak_date_prefix": "2026-06", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2026-06-tesseradao-tsr-admin-key-unauthorized-mint", "url": "https://onchainattack.org/document/examples/2026-06-tesseradao-tsr-admin-key-unauthorized-mint/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--749b5277-7265-53a2-b07a-4e634970adaf", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Token of Power ($TOP) — low-float governance takeover mints 10B TOP in one block — Ethereum — 2026-06-09", "x_oak_date_prefix": "2026-06", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2026-06-token-of-power-top-low-float-governance-takeover-mint", "url": "https://onchainattack.org/document/examples/2026-06-token-of-power-top-low-float-governance-takeover-mint/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--fa50c655-5a24-5a32-8e51-07afc880085e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Zcash Orchard counterfeiting vulnerability — under-constrained halo2 scalar-mul gadget (AI-discovered responsible disclosure) — 2026-05-29 / 2026-06-02", "x_oak_date_prefix": "2026-06", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2026-06-zcash-orchard-counterfeiting-circuit-underconstraint-disclosure", "url": "https://onchainattack.org/document/examples/2026-06-zcash-orchard-counterfeiting-circuit-underconstraint-disclosure/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--9ea867ff-ebe3-5460-8b3a-f05e7ab16872", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "42DAO / Balance Protocol — the attacker pokes an abnormally *low* BTCB price into the vault-health contract, making solvent vaults look insolvent, and liquidates them — 42DAO / Balance Coin (BNB Chain) — 2026-07-22", "x_oak_date_prefix": "2026-07", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2026-07-42dao-balance-btcb-oracle-downward-liquidation-seizure", "url": "https://onchainattack.org/document/examples/2026-07-42dao-balance-btcb-oracle-downward-liquidation-seizure/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--bc9d864d-6bb8-5857-be12-3e50ee6654e0", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Across Protocol — a missing 8-byte Anchor discriminator check lets an attacker forge Solana deposit events that never moved funds, and the relayer fills 581 of them — Across / Risk Labs (Solana) — 2026-07-17", "x_oak_date_prefix": "2026-07", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2026-07-across-solana-relayer-anchor-event-discriminator-forgery", "url": "https://onchainattack.org/document/examples/2026-07-across-solana-relayer-anchor-event-discriminator-forgery/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--a94196b7-6748-5cf3-83d5-f64a9e8cea92", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "AFX Trade — five compromised hot-validator keys meet the bridge's two-thirds quorum, and a 200-second dispute window passes with nobody watching it — AFX Trade (Arbitrum) — 2026-07-22", "x_oak_date_prefix": "2026-07", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2026-07-afx-trade-bridge-hot-validator-key-quorum-compromise", "url": "https://onchainattack.org/document/examples/2026-07-afx-trade-bridge-hot-validator-key-quorum-compromise/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--cef619f3-ef7a-5aed-b170-8521920df0e8", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Allbridge Core — a $1.12M Kamino flash loan skews the USDC/USDT pool ratio, liquidity is withdrawn at the distorted valuation, and the loan repays in the same transaction — Allbridge Core (Solana) — 2026-07-19", "x_oak_date_prefix": "2026-07", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2026-07-allbridge-core-solana-flash-loan-pool-ratio-manipulation", "url": "https://onchainattack.org/document/examples/2026-07-allbridge-core-solana-flash-loan-pool-ratio-manipulation/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--73568bd7-11d5-5515-928a-cd4a51da868d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "B² Network — an attacker takes the staking contract's upgrade authority, rewrites what the contract does, and sells 8.59M B2 into the market — B² Network (Bitcoin Layer 2) — 2026-07-23", "x_oak_date_prefix": "2026-07", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2026-07-b2-network-staking-contract-upgrade-authority-seizure", "url": "https://onchainattack.org/document/examples/2026-07-b2-network-staking-contract-upgrade-authority-seizure/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--24b20635-5277-5283-a704-16e67e18ca08", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "BonkDAO — an attacker buys just over 1% of supply on KYC exchanges, meets a low quorum in a 2.9%-turnout ballot, and votes the treasury to itself — BonkDAO / Realms (Solana) — 2026-07-06", "x_oak_date_prefix": "2026-07", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2026-07-bonkdao-low-quorum-governance-treasury-drain", "url": "https://onchainattack.org/document/examples/2026-07-bonkdao-low-quorum-governance-treasury-drain/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--ca61571c-a42b-5a51-916b-bff338210680", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Bonzo Lend — an all-zero signature satisfies Supra's oracle verifier trivially, inflating SAUCE by ~12 orders of magnitude to borrow $9.05M against 250 tokens — Bonzo Lend / Supra (Hedera) — 2026-07-12", "x_oak_date_prefix": "2026-07", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2026-07-bonzo-lend-supra-oracle-zeroed-signature-drain", "url": "https://onchainattack.org/document/examples/2026-07-bonzo-lend-supra-oracle-zeroed-signature-drain/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--d3fc618a-9947-5a94-9c7b-37d3edb71d63", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Cascade — pre-launch depositors farming reward points had their USDC locked until mainnet, so when the CLS vault was drained none of them could have withdrawn first — Cascade (Arbitrum) — 2026-07-16", "x_oak_date_prefix": "2026-07", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2026-07-cascade-cls-vault-prelaunch-locked-deposit-drain", "url": "https://onchainattack.org/document/examples/2026-07-cascade-cls-vault-prelaunch-locked-deposit-drain/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--2975b8b1-f633-53ae-8d8c-6960127e8f75", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Coldcard — a 2021 library migration left an RNG config check that tested whether a setting existed but not whether it was on, silently dropping seed entropy from 128 bits to 40, and five years of seeds were swept — Coldcard / Coinkite (Bitcoin) — 2026-07-30/31 onward, ongoing", "x_oak_date_prefix": "2026-07", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2026-07-coldcard-firmware-rng-fallback-entropy-collapse-sweep", "url": "https://onchainattack.org/document/examples/2026-07-coldcard-firmware-rng-fallback-entropy-collapse-sweep/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--7b1b8923-6e20-5881-8ed2-33f79c39b464", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "DeFiTuna — concentrated liquidity, lending, and 5x leverage in one protocol, and the attack landed on the seams between them rather than inside any of them — DeFiTuna (Solana) — 2026-07-16", "x_oak_date_prefix": "2026-07", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2026-07-defituna-product-seam-lending-pool-usdc-deficit", "url": "https://onchainattack.org/document/examples/2026-07-defituna-product-seam-lending-pool-usdc-deficit/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--26dcf309-c669-5bbb-81cf-4504c39632cb", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "DPRK state banks breached from the inside — former military operators are reported arrested for diverting state funds into overseas crypto wallets and structuring them out through Chinese border brokers — Central Bank of the DPRK / Foreign Trade Bank — 2026-07-12 (reported 2026-07-25)", "x_oak_date_prefix": "2026-07", "x_oak_attribution": "inferred-weak", "external_references": [ { "source_name": "oak", "external_id": "2026-07-dprk-military-operators-state-bank-diversion-broker-offramp", "url": "https://onchainattack.org/document/examples/2026-07-dprk-military-operators-state-bank-diversion-broker-offramp/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--dffa6da5-9fbe-5eaf-af64-570e4838c151", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Injective Labs SDK — a commit from a trusted maintainer account rides the OIDC auto-publish pipeline into 18 npm packages that exfiltrate seed phrases at key-derivation time — Injective Labs / npm (chain-agnostic) — 2026-07-08", "x_oak_date_prefix": "2026-07", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2026-07-injective-sdk-npm-trusted-publisher-key-exfiltration", "url": "https://onchainattack.org/document/examples/2026-07-injective-sdk-npm-trusted-publisher-key-exfiltration/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--e66ecde5-48a0-5c18-8013-48cd72654414", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "LayerZero Executor — hot wallets for the message-execution role drain simultaneously across eight chains, the signature of co-located key material — LayerZero (cross-chain) — 2026-07-15", "x_oak_date_prefix": "2026-07", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2026-07-layerzero-executor-multi-chain-simultaneous-wallet-drain", "url": "https://onchainattack.org/document/examples/2026-07-layerzero-executor-multi-chain-simultaneous-wallet-drain/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--1109cbd0-8880-58b6-b99f-3f6c4def44e6", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Lien Finance — an internal rate function prices attacker-crafted bonds far above the collateral actually backing them — Lien Finance (Ethereum) — 2026-07-24", "x_oak_date_prefix": "2026-07", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2026-07-lien-finance-bond-rate-calculation-overvaluation-drain", "url": "https://onchainattack.org/document/examples/2026-07-lien-finance-bond-rate-calculation-overvaluation-drain/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--67184120-5c8c-5d57-b89b-fe1f2e9f2d21", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Ostium — an authorised price-report path settles a BTC long opened at $5,000 and closed at ~$60,000 in one transaction, draining the OLP vault — Ostium (Arbitrum) — 2026-07-15", "x_oak_date_prefix": "2026-07", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2026-07-ostium-oracle-signer-future-dated-price-report-vault-drain", "url": "https://onchainattack.org/document/examples/2026-07-ostium-oracle-signer-future-dated-price-report-vault-drain/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--d075b9d4-10b8-597d-8736-38d93bf43984", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Solido Cash — a stale price feed on the backstop collateral token trips fallback logic that values it far above market, and 809,052 CASH are minted against it — Solido Money (SUPRA) — 2026-07-23", "x_oak_date_prefix": "2026-07", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2026-07-solido-cash-stale-feed-fallback-collateral-overvaluation-mint", "url": "https://onchainattack.org/document/examples/2026-07-solido-cash-stale-feed-fallback-collateral-overvaluation-mint/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--7a30a51e-12fa-5fa6-941d-5778ab061fe5", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Summer.fi (Lazy Summer Protocol) — a market capped for offboarding stays priced into vault NAV, so a donation of stale Stream-Finance-era tokens inflates the share price for an atomic redemption — Summer.fi / Lazy Summer (Ethereum) — 2026-07-06", "x_oak_date_prefix": "2026-07", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2026-07-summer-fi-lazy-summer-stale-ark-nav-donation-drain", "url": "https://onchainattack.org/document/examples/2026-07-summer-fi-lazy-summer-stale-ark-nav-donation-drain/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--e68a9777-418d-50fa-bdd8-cb971558a51c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Triple-A — a licensed payment processor's hot wallets are swept for 31 hours because pausing the service never disabled the on-chain deposit addresses still receiving merchant settlements — Triple-A (Singapore) — 2026-07-24/25", "x_oak_date_prefix": "2026-07", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2026-07-triple-a-hot-wallet-compromise-deposit-addresses-left-live", "url": "https://onchainattack.org/document/examples/2026-07-triple-a-hot-wallet-compromise-deposit-addresses-left-live/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--b949e15a-d5dc-5474-9929-7c6763a1eab6", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Verus ⇄ Ethereum Bridge, second time — the May attacker returns the funds, the team redeposits them into the unfixed contract, and a different attacker takes them out through the same import path — Verus / Ethereum — 2026-07-23", "x_oak_date_prefix": "2026-07", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2026-07-verus-ethereum-bridge-repeat-exploit-unfixed-import-path", "url": "https://onchainattack.org/document/examples/2026-07-verus-ethereum-bridge-repeat-exploit-unfixed-import-path/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--7a251a45-3fc8-54a2-baba-68049a1606d1", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Wanchain Cardano bridge — 14 variable-length fields concatenated without separators make the signed message non-injective, so a signature for 3,110 NIGHT authorises 203,001,692 — Wanchain / Midnight NIGHT (Cardano ⇄ BNB Chain) — 2026-07-20/21", "x_oak_date_prefix": "2026-07", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2026-07-wanchain-cardano-bridge-non-injective-encoding-signature-reuse", "url": "https://onchainattack.org/document/examples/2026-07-wanchain-cardano-bridge-non-injective-encoding-signature-reuse/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--691c5637-b82e-56ff-8aec-db95d32700ab", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "WEMIX — an attacker takes administrator privileges over the WEMIX$ stablecoin contract and mints 5.2M units out of nothing, forcing the network to shut its own bridges, DEX, and marketplace — WEMIX (Wemix3.0) — 2026-07-26", "x_oak_date_prefix": "2026-07", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2026-07-wemix-stablecoin-contract-ownership-unauthorized-mint", "url": "https://onchainattack.org/document/examples/2026-07-wemix-stablecoin-contract-ownership-unauthorized-mint/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--efbd291f-64af-5651-8453-c87145cff95c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Allbridge — a forged CCTP attestation was minted on 26 July, left to sit for 24 days, and redeemed on 19 August the moment the target router had a balance worth taking — Allbridge / Polygon → Base — 2026-08-19", "x_oak_date_prefix": "2026-08", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2026-08-allbridge-dormant-forged-cctp-attestation", "url": "https://onchainattack.org/document/examples/2026-08-allbridge-dormant-forged-cctp-attestation/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--2e861b74-aeee-58b6-8585-1ba770b07db1", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "BounceBit — an inherited Evmos authorisation flaw let a caller name any account as the source of funds, and the chain was retired rather than patched — BounceBit Chain — 2026-08-19", "x_oak_date_prefix": "2026-08", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2026-08-bouncebit-evmos-stack-authorization-flaw-chain-retirement", "url": "https://onchainattack.org/document/examples/2026-08-bouncebit-evmos-stack-authorization-flaw-chain-retirement/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--4ec15cc9-ec58-517b-863f-fc59bba119b7", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Coinsbuy — a B2B payment processor's Ethereum and TRON wallets emptied in the same hour, the signature of one signing infrastructure rather than two compromises — Coinsbuy (Ethereum, TRON) — 2026-08-09", "x_oak_date_prefix": "2026-08", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2026-08-coinsbuy-payment-processor-multi-chain-hot-wallet-drain", "url": "https://onchainattack.org/document/examples/2026-08-coinsbuy-payment-processor-multi-chain-hot-wallet-drain/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--520967bb-f6d4-590b-a7fc-a59279613bdd", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Coreum–XRPL bridge — relayers verified that a deposit *message* was well-formed and never that the XRP had arrived, so self-transfers carrying a forged memo released 199,916 real XRP — Coreum / XRP Ledger — 2026-08-09", "x_oak_date_prefix": "2026-08", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2026-08-coreum-xrpl-bridge-forged-deposit-memo-relayer-verification", "url": "https://onchainattack.org/document/examples/2026-08-coreum-xrpl-bridge-forged-deposit-memo-relayer-verification/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--aeb37eb7-8fd6-5dcf-8755-c8d5ff4313c8", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Harmony — a committee verifier that counted the roster instead of the signers accepted an all-zero signature mask, and unauthenticated receipt-proof fields let spent cross-shard receipts be credited again — Harmony Mainnet (ONE) — 2026-08-12", "x_oak_date_prefix": "2026-08", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2026-08-harmony-cross-shard-receipt-quorum-bypass-unauthorized-mint", "url": "https://onchainattack.org/document/examples/2026-08-harmony-cross-shard-receipt-quorum-bypass-unauthorized-mint/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--e51edda4-f367-53cf-8c2f-9de24e9d0629", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Maya Protocol — one deposit carrying 23 messages overwrote the chain's own observed-transaction voter, so a safety mechanism paid a 49.45M CACAO \"compensation\" into a pool holding 0.11 LINK — MAYAChain — 2026-08-18", "x_oak_date_prefix": "2026-08", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2026-08-maya-protocol-observed-tx-voter-overwrite-uncapped-subsidy", "url": "https://onchainattack.org/document/examples/2026-08-maya-protocol-observed-tx-voter-overwrite-uncapped-subsidy/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--0f1b58d1-74be-5998-b46b-542adb760210", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Moonwell — the same protocol lost money to its price feed for the second time in six months, this time by listing a token thin enough to move by hand — Moonwell / Base — 2026-08-27", "x_oak_date_prefix": "2026-08", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2026-08-moonwell-mamo-spot-oracle-collateral-inflation-repeat", "url": "https://onchainattack.org/document/examples/2026-08-moonwell-mamo-spot-oracle-collateral-inflation-repeat/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--4ce17e17-7a0c-5e48-a847-0e409ecb51db", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "OAK field-collects a live fake-recruiter lure to check its own T15.001 page against a real specimen — and finds the page wrong on two points: the trigger is npm `prepare`, and the repository carries no payload at all — OnChainAttack, first-party collection — 2026-08-27", "x_oak_date_prefix": "2026-08", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2026-08-onchainattack-maintainer-fake-assessment-lure", "url": "https://onchainattack.org/document/examples/2026-08-onchainattack-maintainer-fake-assessment-lure/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--fc1fc215-94ea-55af-a28f-eb9413afbf36", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Oraichain — an EVM cross-chain transfer path allowed ORAI to be minted without a backing deposit, and the team stopped the entire chain four hours in rather than let the supply keep moving — Oraichain (Cosmos SDK / OraichainEVM) — 2026-08-09", "x_oak_date_prefix": "2026-08", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2026-08-oraichain-evm-transfer-path-unauthorized-mint-network-halt", "url": "https://onchainattack.org/document/examples/2026-08-oraichain-evm-transfer-path-unauthorized-mint-network-halt/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--46b55a28-0e44-5e76-b405-6df871aa9386", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Repeat-victim whale — the same address that lost \\$24.2M to approval phishing in 2023 was drained again for \\$25.6M three years later, and this time nothing came back — unidentified individual (Ethereum) — 2026-08-12 (first drain 2023-09)", "x_oak_date_prefix": "2026-08", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2026-08-repeat-victim-whale-approval-phishing-second-drain", "url": "https://onchainattack.org/document/examples/2026-08-repeat-victim-whale-approval-phishing-second-drain/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--17f9c2fd-bb70-5df1-852f-d8666ff4d33a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "The Sandbox — hijacked LayerZero OFT delegate permissions minted \\$49B of face-value SAND across 400+ transactions, and the pools could only pay out \\$675K of it — The Sandbox / Base + BNB Smart Chain — 2026-08-22", "x_oak_date_prefix": "2026-08", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2026-08-sandbox-sand-layerzero-oft-delegate-hijack-unbacked-mint", "url": "https://onchainattack.org/document/examples/2026-08-sandbox-sand-layerzero-oft-delegate-hijack-unbacked-mint/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--6d6e200a-20ef-598c-a0fe-4310648ce19b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "TAC — the upstream fix was three days old and the attack method had been published two days earlier, so the chain was drained through a bug it could have patched and then froze for ten days — TAC (Cosmos EVM / TON-connected L1) — 2026-08-22", "x_oak_date_prefix": "2026-08", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2026-08-tac-cosmos-evm-vesting-delegation-underflow-patch-lag", "url": "https://onchainattack.org/document/examples/2026-08-tac-cosmos-evm-vesting-delegation-underflow-patch-lag/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--505802ed-91cb-58af-9a64-eaef51f0f7cd", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Tectonic — a lending market accepted its own thinly-traded token as collateral, and when the price was pumped the chain itself had to be rewound to contain the loss — Tectonic / Cronos — 2026-08-30", "x_oak_date_prefix": "2026-08", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2026-08-tectonic-tonic-self-collateral-inflation-cronos-state-rollback", "url": "https://onchainattack.org/document/examples/2026-08-tectonic-tonic-self-collateral-inflation-cronos-state-rollback/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--f61cbca0-4c66-5db7-9911-f83e16e4906e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Term Finance — \\$951 bought 90.66% of a vault's voting power, because voting required opt-in staking and almost nobody had opted in — Term Labs / Ethereum — 2026-08-23", "x_oak_date_prefix": "2026-08", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2026-08-term-finance-vault-governance-quorum-capture", "url": "https://onchainattack.org/document/examples/2026-08-term-finance-vault-governance-quorum-capture/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--0e873567-2da0-588c-977b-648be78c2aa6", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "USM — redeeming the same position in 64 slices paid more than redeeming it once, because the redemption price was an arithmetic mean over the path rather than a function of the position — USM Protocol (Ethereum) — 2026-08-10", "x_oak_date_prefix": "2026-08", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2026-08-usm-defund-split-arithmetic-mean-redemption-pricing", "url": "https://onchainattack.org/document/examples/2026-08-usm-defund-split-arithmetic-mean-redemption-pricing/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--d8b98a22-9455-56f4-b052-2fdc8afdbeba", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Bitget — no key was stolen; the approval process signed exactly what a compromised backend told it to — Bitget / hot and warm wallets / Ethereum, XRPL, Arbitrum, Avalanche, Optimism, BSC, Base — 2026-09-24", "x_oak_date_prefix": "2026-09", "x_oak_attribution": "inferred-weak", "external_references": [ { "source_name": "oak", "external_id": "2026-09-bitget-wallet-backend-spoofed-transfer-data-hot-warm-drain", "url": "https://onchainattack.org/document/examples/2026-09-bitget-wallet-backend-spoofed-transfer-data-hot-warm-drain/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--7f0dd841-f42f-5b82-817d-bd301cb2ed86", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "BonfireSwap — the router's transfer function never asked who was calling it, so 41 holders' standing approvals were spent for them — Bonfire / BNB Chain — 2026-09-16", "x_oak_date_prefix": "2026-09", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2026-09-bonfireswap-router-transfer-missing-caller-check-approval-drain", "url": "https://onchainattack.org/document/examples/2026-09-bonfireswap-router-transfer-missing-caller-check-approval-drain/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--21a7e6df-3a60-5443-b04f-f0baeafddcb0", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Chainflip — the swap instruction lived in a memo, and the attacker appended their own to a transaction the validators had already signed — Chainflip / Tron settlement path — 2026-09-12", "x_oak_date_prefix": "2026-09", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2026-09-chainflip-tron-memo-append-duplicate-refund-payout", "url": "https://onchainattack.org/document/examples/2026-09-chainflip-tron-memo-append-duplicate-refund-payout/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--a52a60d9-2e82-56b0-aef2-db4d6919eb31", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "D'CENT — the app wallet started moving assets on its own, and the vendor's own advisory told hardware-wallet users sharing a mnemonic to run too — D'CENT / App Wallet (software) / multi-chain — 2026-09-16", "x_oak_date_prefix": "2026-09", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2026-09-dcent-app-wallet-abnormal-transfers-shared-mnemonic-exposure", "url": "https://onchainattack.org/document/examples/2026-09-dcent-app-wallet-abnormal-transfers-shared-mnemonic-exposure/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--effb17e8-8221-55ef-a078-47f75c1c0793", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "DoinGud — accepting a bid paid out and left the bid on the books, so the same bid could be accepted twice — DoinGud (dormant NFT platform) / Polygon — 2026-09-21", "x_oak_date_prefix": "2026-09", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2026-09-doingud-dormant-diamond-acceptbid-bid-reuse-drain", "url": "https://onchainattack.org/document/examples/2026-09-doingud-dormant-diamond-acceptbid-bid-reuse-drain/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--974e9ee4-a39b-50b4-8596-3867f94fbfc9", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Dream Health Chain — awards were recorded without locking the funds to pay them, and a claimed award could be reset and claimed again — Dream Health Chain / BNB Chain — 2026-09-05", "x_oak_date_prefix": "2026-09", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2026-09-dream-health-chain-award-reset-repeat-claim", "url": "https://onchainattack.org/document/examples/2026-09-dream-health-chain-award-reset-repeat-claim/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--9043ef46-efac-5ecf-9da1-02406ae6b3bc", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Duelbits — four chains' hot wallets emptied within minutes, which is one compromise, not four — Duelbits (crypto casino) / Ethereum, BNB Chain, Tron, Bitcoin — 2026-09-24", "x_oak_date_prefix": "2026-09", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2026-09-duelbits-multi-chain-hot-wallet-key-compromise", "url": "https://onchainattack.org/document/examples/2026-09-duelbits-multi-chain-hot-wallet-key-compromise/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--89128ba8-ac9b-5513-ba8d-be2ad5aac2b4", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "ether.fi — a deprecated withdrawal queue let anyone name someone else as the solver, and eleven wallets' un-revoked approvals paid the bill — ether.fi / Veda AtomicQueue / Ethereum — 2026-09-11", "x_oak_date_prefix": "2026-09", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2026-09-etherfi-legacy-atomicqueue-solver-access-control-approval-drain", "url": "https://onchainattack.org/document/examples/2026-09-etherfi-legacy-atomicqueue-solver-access-control-approval-drain/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--9e385d8d-0b67-5afb-925c-3eac747446aa", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Fake GIWA chain — a cloned L2 with Upbit's real chain ID, a working bridge, and a \"leaked mainnet RPC\" rumour collected 766 ETH before the real team said mainnet was not live — GIWA (Upbit L2) impersonation / Ethereum — 2026-09-26 → 27", "x_oak_date_prefix": "2026-09", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2026-09-fake-giwa-chain-id-cloned-l2-bridge-drain", "url": "https://onchainattack.org/document/examples/2026-09-fake-giwa-chain-id-cloned-l2-bridge-drain/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--03aa5709-e21f-5ac6-bd56-13d007c62e6e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Flamincome — an \\$18M flash loan moved a vault's share price for one transaction, and redemption trusted it — Flamincome / EVM (chain not named in reporting; Morpho, Curve and aUSDT legs indicate Ethereum) — 2026-09-16", "x_oak_date_prefix": "2026-09", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2026-09-flamincome-vault-share-price-flash-loan-inflation", "url": "https://onchainattack.org/document/examples/2026-09-flamincome-vault-share-price-flash-loan-inflation/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--812e75e4-8081-554c-bc25-fb690db237f6", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Hemi Network — an airdrop contract created the lock before it updated the ledger, so 63 recursive claims emptied every allocation nobody had collected yet — Hemi Network — 2026-09-07", "x_oak_date_prefix": "2026-09", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2026-09-hemi-genesis-drop-merklebox-reentrancy-unclaimed-drain", "url": "https://onchainattack.org/document/examples/2026-09-hemi-genesis-drop-merklebox-reentrancy-unclaimed-drain/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--9589c0d4-664c-5fa3-aa8e-9b909fa367bf", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Likwid — the zero-leverage borrow path never updated reserves, so every borrow got the same quote — Likwid / BNB Smart Chain — 2026-09-18", "x_oak_date_prefix": "2026-09", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2026-09-likwid-margin-position-zero-leverage-stale-reserves-borrow-loop", "url": "https://onchainattack.org/document/examples/2026-09-likwid-margin-position-zero-leverage-stale-reserves-borrow-loop/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--206bb25e-ed02-5389-833b-0395a53dd3b3", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Limit Break Payment Processor V2 — a marketplace stopped using the contract in 2024, the approvals users gave it did not stop — Limit Break Payment Processor V2 / Ethereum — 2026-09-25", "x_oak_date_prefix": "2026-09", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2026-09-limit-break-payment-processor-v2-standing-approval-zero-price-drain", "url": "https://onchainattack.org/document/examples/2026-09-limit-break-payment-processor-v2-standing-approval-zero-price-drain/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--23b98df5-b5f1-5d04-83de-b93a383e4fb0", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Liquid Network — unbacked L-BTC passed consensus, so the federation's 11-of-15 signers approved a peg-out that was valid in every way they were built to check — Liquid Network (Blockstream) / Bitcoin sidechain — 2026-09-06", "x_oak_date_prefix": "2026-09", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2026-09-liquid-network-rangeproof-cache-unbacked-lbtc-pegout", "url": "https://onchainattack.org/document/examples/2026-09-liquid-network-rangeproof-cache-unbacked-lbtc-pegout/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--77f36dee-d487-5bb1-8e2b-a666a955eb68", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Long — the keeper believed a withdrawal had happened on Arc because the RPC it asked said so, and the RPC was not telling the truth — Long / custodial bridge / Arc → Robinhood Chain — 2026-09-14", "x_oak_date_prefix": "2026-09", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2026-09-long-custodial-bridge-third-party-rpc-fabricated-withdrawal-events", "url": "https://onchainattack.org/document/examples/2026-09-long-custodial-bridge-third-party-rpc-fabricated-withdrawal-events/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--630aa982-14a8-539d-8bcd-d18b255c2a69", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Meter Passport — the same bridge mints unbacked wrapped tokens on BNB Chain four and a half years after the first time — Meter Passport / BNB Smart Chain — 2026-09-24", "x_oak_date_prefix": "2026-09", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2026-09-meter-passport-bnb-unbacked-wmtrg-mint-second-incident", "url": "https://onchainattack.org/document/examples/2026-09-meter-passport-bnb-unbacked-wmtrg-mint-second-incident/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--2b83881e-8eeb-58d3-8ebd-21da4b0f2ed8", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "MultiversX — a VM that did not roll back cleanly let invalid state reach the ledger, and the chain stopped — MultiversX mainnet — 2026-09-19", "x_oak_date_prefix": "2026-09", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2026-09-multiversx-vm-atomicity-invalid-state-chain-halt", "url": "https://onchainattack.org/document/examples/2026-09-multiversx-vm-atomicity-invalid-state-chain-halt/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--f91d87e5-6c85-5642-b8a5-13f64493a9c4", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Neutron proposal 9 — \\$20K of tokens bought eleven minutes before the tally made the attacker admin of ten contracts — Neutron (Cosmos consumer chain) / Astroport, Drop — 2026-09-22", "x_oak_date_prefix": "2026-09", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2026-09-neutron-governance-proposal-contract-admin-takeover-astroport-drop", "url": "https://onchainattack.org/document/examples/2026-09-neutron-governance-proposal-contract-admin-takeover-astroport-drop/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--8505ae37-b646-5266-8404-e6ccb3c46505", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Nostra — a token worth \\$550K in total was accepted as collateral for \\$3.5M of loans after its price moved 8,000× in minutes — Nostra Finance / Starknet — 2026-09-17", "x_oak_date_prefix": "2026-09", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2026-09-nostra-starknet-nstr-thin-pool-oracle-collateral-inflation", "url": "https://onchainattack.org/document/examples/2026-09-nostra-starknet-nstr-thin-pool-oracle-collateral-inflation/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--feabc67c-9918-5042-b47e-5b1784ddea0f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Notional Finance — a deprecated V1 escrow nobody had swept was drained through a debt of −2^128 that an unsafe cast rounded to zero — Notional Finance / Ethereum — 2026-09-04", "x_oak_date_prefix": "2026-09", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2026-09-notional-finance-v1-escrow-uint128-downcast-liability-truncation", "url": "https://onchainattack.org/document/examples/2026-09-notional-finance-v1-escrow-uint128-downcast-liability-truncation/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--88c25678-f93e-57bb-97e8-2045452935f1", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Payy — a forged withdrawal rode inside an otherwise valid proven batch and the bridge paid out its whole balance — Payy Network (privacy stablecoin rollup) / Ethereum L1 bridge — 2026-09-24", "x_oak_date_prefix": "2026-09", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2026-09-payy-rollup-bridge-forged-withdrawal-in-proven-batch", "url": "https://onchainattack.org/document/examples/2026-09-payy-rollup-bridge-forged-withdrawal-in-proven-batch/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--86e831d2-9027-5d0b-baea-f09eda0297d9", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "RedSonic Vault — anyone could register the same collateral a second time, so one pool of stETH backed two share classes and both of them were redeemed — RedSonic / Ethereum — 2026-09-05", "x_oak_date_prefix": "2026-09", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2026-09-redsonic-vault-duplicate-asset-registration-share-inflation", "url": "https://onchainattack.org/document/examples/2026-09-redsonic-vault-duplicate-asset-registration-share-inflation/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--7f59cfc8-efaf-5c3d-af97-1149ee757c62", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Safe strategy executor — the permission check passed because the module asked itself for permission, and an MEV bot took the proceeds before the attacker could — Gnosis Safe / whitelisted strategy-executor module / Ethereum — 2026-09-15", "x_oak_date_prefix": "2026-09", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2026-09-safe-strategy-executor-multicall-self-target-delegatecall-drain", "url": "https://onchainattack.org/document/examples/2026-09-safe-strategy-executor-multicall-self-target-delegatecall-drain/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--c667fab3-dcdb-54c2-8cb0-01ed2f8103ff", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "SingularityNET bridge — one stolen authorizer key, a signature that did not name the recipient, and no cap on the inbound path — SingularityNET Ethereum–Cardano bridge / Fetch.ai, NuNet, SingularityNET, World Mobile / Ethereum — 2026-09-19", "x_oak_date_prefix": "2026-09", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2026-09-singularitynet-bridge-authorizer-key-compromise-fet-drain-unbacked-mints", "url": "https://onchainattack.org/document/examples/2026-09-singularitynet-bridge-authorizer-key-compromise-fet-drain-unbacked-mints/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--2ceab430-f99c-5515-8aa6-148803f3d034", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "SpiralCom — the collateral was priced at whatever the pool said in that block, and the attacker owned that block — SpiralCom / Uniswap V4 / Ethereum — 2026-09-14", "x_oak_date_prefix": "2026-09", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2026-09-spiralcom-uniswap-v4-spot-price-collateral-inflation", "url": "https://onchainattack.org/document/examples/2026-09-spiralcom-uniswap-v4-spot-price-collateral-inflation/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--ef8dda21-786b-562c-88b3-b04938a179e2", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Symbiosis — a bridge accepted a message it should have rejected and minted 2^62 raw units of synthetic Bitcoin, of which the market let the attacker keep a third of a million — Symbiosis / BNB Chain + Ethereum — 2026-09-11", "x_oak_date_prefix": "2026-09", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2026-09-symbiosis-bridgev2-message-validation-unbacked-sybtc-mint", "url": "https://onchainattack.org/document/examples/2026-09-symbiosis-bridgev2-message-validation-unbacked-sybtc-mint/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--7b01ae06-6b28-59e5-8838-d3adac010d94", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "WaterPlum / Contagious Interview — seven agencies in four countries put numbers on the fake-recruiter campaign: 30,000 machines, 7,000 wallets, ¥1.7B — developers and IT freelancers worldwide — 2025-12 → 2026-07 (attributed 2026-09-18)", "x_oak_date_prefix": "2026-09", "x_oak_attribution": "confirmed", "external_references": [ { "source_name": "oak", "external_id": "2026-09-waterplum-contagious-interview-joint-attribution-developer-wallet-theft", "url": "https://onchainattack.org/document/examples/2026-09-waterplum-contagious-interview-joint-attribution-developer-wallet-theft/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--8d5f9063-981e-5592-bcfb-cb921d2c7974", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "XRPH Wallet — a self-custody wallet sent the user's seed phrase to the vendor's own server every time someone staked, and 4,011 accounts were emptied — XRP Healthcare (XRPH Wallet) / XRP Ledger — 2026-09-03", "x_oak_date_prefix": "2026-09", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2026-09-xrph-wallet-staking-seed-phrase-server-transmission", "url": "https://onchainattack.org/document/examples/2026-09-xrph-wallet-staking-seed-phrase-server-transmission/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--d253b118-7f87-583f-b8f9-49f72fdb7baf", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "79th Vault — the operator key could move 2M project tokens, so stealing it was the same as owning the pool's USDT — 79th Vault (79AU) / BNB Chain — 2026-10-07", "x_oak_date_prefix": "2026-10", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2026-10-79th-vault-operator-key-79au-pool-dump", "url": "https://onchainattack.org/document/examples/2026-10-79th-vault-operator-key-79au-pool-dump/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--5d5fda06-87ec-5930-80ad-dc2d0da760f1", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Anonymous Base vault — the owner Safe removed and re-added an attacker contract to the whitelist inside one minute, with three valid signatures each time — unidentified vault / Base (Aave V3) — 2026-10-04", "x_oak_date_prefix": "2026-10", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2026-10-base-anonymous-vault-safe-rewhitelist-aave-borrow-drain", "url": "https://onchainattack.org/document/examples/2026-10-base-anonymous-vault-safe-rewhitelist-aave-borrow-drain/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--372f6d56-1f45-5c8c-b48e-64e3c78a87c6", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "BitBay StableVault — with liquidity forced to zero, one share redeemed the whole vault — BitBay StableVault (UsdcDaiV4Vault) / Polygon — 2026-10-09", "x_oak_date_prefix": "2026-10", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2026-10-bitbay-stablevault-zero-liquidity-withdraw-full-balance", "url": "https://onchainattack.org/document/examples/2026-10-bitbay-stablevault-zero-liquidity-withdraw-full-balance/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--717df0ae-35d0-502d-8884-32d1690c48be", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "EtherVista — the K check multiplied uint112 reserves and overflowed, so a smaller product passed as a larger one — EtherVista / EVM — 2026-10-09", "x_oak_date_prefix": "2026-10", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2026-10-ethervista-pair-uint112-k-invariant-overflow-swap-drain", "url": "https://onchainattack.org/document/examples/2026-10-ethervista-pair-uint112-k-invariant-overflow-swap-drain/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--2bedc5d8-31ad-5a91-81fe-e7ee29d9e49b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "FlashLoopAdapter — the Safe module asked the caller whether it was a Safe with the module enabled, and a fake Safe said yes — FlashLoopAdapter (Aave V3 loop Safe module) / Ethereum — 2026-10-01", "x_oak_date_prefix": "2026-10", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2026-10-flashloopadapter-safe-module-fake-safe-ismoduleenabled-bypass", "url": "https://onchainattack.org/document/examples/2026-10-flashloopadapter-safe-module-fake-safe-ismoduleenabled-bypass/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--f9b6a58b-7460-5741-b510-97e548f262c6", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "GoldPesa — a hook's reBalance() trusted currency deltas it never settled through the shared PositionManager — GoldPesa (GPX) / Base — 2026-10-02", "x_oak_date_prefix": "2026-10", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2026-10-goldpesa-gpxhooks-rebalance-unvalidated-currency-delta", "url": "https://onchainattack.org/document/examples/2026-10-goldpesa-gpxhooks-rebalance-unvalidated-currency-delta/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--97979800-e0f4-5648-b3a7-64eac3ca254f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Ledger / CryptoBilis — every reported victim bought from one authorised reseller, so the shared factor was the distribution channel, not the device line — CryptoBilis (Ledger reseller, Southeast Asia) / Ethereum, Tron, Bitcoin — 2026-10-09", "x_oak_date_prefix": "2026-10", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2026-10-ledger-cryptobilis-reseller-supply-chain-seed-drain", "url": "https://onchainattack.org/document/examples/2026-10-ledger-cryptobilis-reseller-supply-chain-seed-drain/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--436f0708-da26-587b-bbb5-0a6dd836b471", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "MakerDAO legacy auction keeper — four lots won with zero bids on Black Thursday sat unsettled for six and a half years behind a function that never checked its caller — third-party keeper on MakerDAO / Ethereum — 2026-10-06", "x_oak_date_prefix": "2026-10", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2026-10-makerdao-legacy-auction-keeper-unauthenticated-adapter-black-thursday-collateral", "url": "https://onchainattack.org/document/examples/2026-10-makerdao-legacy-auction-keeper-unauthenticated-adapter-black-thursday-collateral/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--d08dfa8b-3c16-5ac5-971d-f469e1f1a48f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "MALT — the swap's own rebalancing pulled DAI from the treasury, and the swap counted it as the trader's payment — MALT / EVM — 2026-10-03", "x_oak_date_prefix": "2026-10", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2026-10-malt-swap-rebalance-treasury-dai-counted-as-trader-input", "url": "https://onchainattack.org/document/examples/2026-10-malt-swap-rebalance-treasury-dai-counted-as-trader-input/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--67b6e607-5968-5695-9f36-6f73e7c75ae4", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Microsoft's X account — a hijacked corporate account promoted a \"CLIPPY\" token riding the MSFT ticker — Microsoft (@Microsoft on X) / token chain not reported — 2026-10-01", "x_oak_date_prefix": "2026-10", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2026-10-microsoft-x-account-compromise-clippy-token-promotion", "url": "https://onchainattack.org/document/examples/2026-10-microsoft-x-account-compromise-clippy-token-promotion/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--5364cc6f-320d-549f-9bc5-97cb4190261f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "NEAR Intents — a bug at the seam between the Omni deposit/withdrawal layer and the intents contract let USDT leave a BNB Chain treasury — NEAR Intents / BNB Chain — 2026-10-01", "x_oak_date_prefix": "2026-10", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2026-10-near-intents-omni-deposit-withdraw-handoff-treasury-drain", "url": "https://onchainattack.org/document/examples/2026-10-near-intents-omni-deposit-withdraw-handoff-treasury-drain/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--25849a83-9266-5673-a50e-d44261f71d34", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "CoW Swap / Aave interface $50M USDT→AAVE swap — extreme price impact and MEV backrun — 2026-03-12", "x_oak_date_prefix": "2026", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2026-cowswap-large-trade-mev-routing-liquidity-fragmentation", "url": "https://onchainattack.org/document/examples/2026-cowswap-large-trade-mev-routing-liquidity-fragmentation/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--99517094-eb0c-5a1d-89cb-d708c4ec6f76", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "EIP-7702 Delegation Phishing — Continued 2026 CrimeEnjoyor Cluster Operations — 2026 — ~$3M+", "x_oak_date_prefix": "2026", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2026-eip7702-crimeenjoyor-delegation-phishing-continuation", "url": "https://onchainattack.org/document/examples/2026-eip7702-crimeenjoyor-delegation-phishing-continuation/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--4c2b4e8f-c8b4-52d4-b40f-2ad58f0a8617", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Q1–Q2 2026 Access-Control and Authorisation-Gap Cohort — Sweat Foundation, Ekubo, Giddy, Aftermath Perps — Aggregate ~$7.3M", "x_oak_date_prefix": "2026", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2026-q1-q2-access-control-auth-cohort", "url": "https://onchainattack.org/document/examples/2026-q1-q2-access-control-auth-cohort/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--914af82e-9fc4-5e83-96c6-421663d2a28c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Q1–Q2 2026 Cross-Chain, Bridge and OTC Exploit Cohort — CrossCurve, Purrlend, Transit Finance, Meteora DAMM V2, TAC Protocol, Alephium — Aggregate ~$11.4M", "x_oak_date_prefix": "2026", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2026-q1-q2-crosschain-bridge-otc-cohort", "url": "https://onchainattack.org/document/examples/2026-q1-q2-crosschain-bridge-otc-cohort/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--692bf9e6-2a8b-51a7-9bf4-282b021827c7", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Q1–Q2 2026 Flash-Loan, Approval and Slippage Exploit Cohort — Matcha/SwapNet, Cyrus Finance, Aperture, and the YO Protocol keeper mis-swap — Aggregate ~$17.6M across three exploits", "x_oak_date_prefix": "2026", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2026-q1-q2-flashloan-approval-slippage-cohort", "url": "https://onchainattack.org/document/examples/2026-q1-q2-flashloan-approval-slippage-cohort/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--24cbcd77-8d17-5d7d-8fa9-d7c466708ef5", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Q1–Q2 2026 Key Compromise Cohort — Step Finance, IoTeX, Grinex, Gravity Bridge, Polymarket UMA — Aggregate ~$68.7M", "x_oak_date_prefix": "2026", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2026-q1-q2-key-compromise-cohort", "url": "https://onchainattack.org/document/examples/2026-q1-q2-key-compromise-cohort/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--c8ecd20a-f7a4-5e79-a68c-911263e7e35d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Q1–Q2 2026 Mint and Tokenomics Exploit Cohort — Truebit, Saga, SolvBTC, FOOM Cash, TMX TRIBE — Aggregate ~$40.1M", "x_oak_date_prefix": "2026", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2026-q1-q2-mint-and-tokenomics-exploit-cohort", "url": "https://onchainattack.org/document/examples/2026-q1-q2-mint-and-tokenomics-exploit-cohort/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--4066fecb-90c1-5679-b605-ec12064a9a8c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Q1–Q2 2026 Oracle and Price-Manipulation Cohort — Blend Pools V2, Makina, Moonwell, BSC TMM/USDT — Aggregate ~$18.6M", "x_oak_date_prefix": "2026", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2026-q1-q2-oracle-price-manipulation-cohort", "url": "https://onchainattack.org/document/examples/2026-q1-q2-oracle-price-manipulation-cohort/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--7436d684-810b-5fcf-af82-13a75e6f4867", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Q1–Q2 2026 Sub-Million Exploit Cohort — 36 Incidents Across 13 Chains — Aggregate ~\\$9.8M", "x_oak_date_prefix": "2026", "x_oak_attribution": "unattributed", "external_references": [ { "source_name": "oak", "external_id": "2026-q1-q2-sub-million-exploit-cohort", "url": "https://onchainattack.org/document/examples/2026-q1-q2-sub-million-exploit-cohort/" } ] }, { "type": "x-oak-incident", "spec_version": "2.1", "id": "x-oak-incident--73b27c91-43a7-5a7a-9d00-8df56aaba351", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "name": "Solana PermanentDelegate burn-on-buy, 2026 continuation — the operators started revoking every authority the checkers look at and keeping the one they don't — Solana / Token-2022 — 2026 Q1", "x_oak_date_prefix": "2026", "x_oak_attribution": "pseudonymous", "external_references": [ { "source_name": "oak", "external_id": "2026-q1-solana-permanent-delegate-renouncement-theatre-continuation", "url": "https://onchainattack.org/document/examples/2026-q1-solana-permanent-delegate-renouncement-theatre-continuation/" } ] }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--74a11ed5-6387-5472-ba0f-585d35986a6a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--65aa1681-44d0-5121-8849-2b866abc876c", "target_ref": "attack-pattern--3113300f-d067-5bda-b93a-de6cb0044037" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--12d9dfe2-4dee-567b-be8a-32d8db8021ea", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--65aa1681-44d0-5121-8849-2b866abc876c", "target_ref": "attack-pattern--aa324a54-0e77-513e-bc77-dea4683702d2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--89a41937-66cc-58e2-9c3b-b52d92570ebe", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--65aa1681-44d0-5121-8849-2b866abc876c", "target_ref": "attack-pattern--e45221c4-74e9-52ab-8e20-96d05003d65a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d81c1eba-b5bc-57f2-8fc5-26225781f56b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--65aa1681-44d0-5121-8849-2b866abc876c", "target_ref": "attack-pattern--00534efe-a713-54c9-9ef3-5b12fd6d0c01" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--54818848-06d7-5323-9a9d-fafa787a18fa", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--65aa1681-44d0-5121-8849-2b866abc876c", "target_ref": "attack-pattern--39564b4f-4af2-5b1a-8405-eb8cf9d2f12b" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--92a4e1c9-ea67-5ad3-9abe-6fca391e8c6d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--65aa1681-44d0-5121-8849-2b866abc876c", "target_ref": "attack-pattern--d9e4a005-06a9-5cee-9f7c-234e20790118" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7ed49c59-a1f8-5000-85e0-1e01892d1fba", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--65aa1681-44d0-5121-8849-2b866abc876c", "target_ref": "attack-pattern--5a491154-55c8-5abc-8449-0d48df41514b" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e411c2c6-579c-5a37-a0b6-6a7ffa22fa33", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--0e4b3b55-5f84-5074-9b3b-9404e99b67fd", "target_ref": "attack-pattern--3113300f-d067-5bda-b93a-de6cb0044037" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--34b81a1c-3114-5741-8ae6-27f0409c4d66", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--0e4b3b55-5f84-5074-9b3b-9404e99b67fd", "target_ref": "attack-pattern--aa324a54-0e77-513e-bc77-dea4683702d2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--30ef5632-468f-5c48-9319-3e227f7a8f73", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--0e4b3b55-5f84-5074-9b3b-9404e99b67fd", "target_ref": "attack-pattern--e45221c4-74e9-52ab-8e20-96d05003d65a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--08d37896-b80a-5bb3-912b-896e77404882", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--0e4b3b55-5f84-5074-9b3b-9404e99b67fd", "target_ref": "attack-pattern--00534efe-a713-54c9-9ef3-5b12fd6d0c01" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--31662a5f-e85f-5e2d-aeaa-f492e0739002", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--0e4b3b55-5f84-5074-9b3b-9404e99b67fd", "target_ref": "attack-pattern--d9e4a005-06a9-5cee-9f7c-234e20790118" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--da322009-ab8f-5582-b658-0b8df7eaa537", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--0e4b3b55-5f84-5074-9b3b-9404e99b67fd", "target_ref": "attack-pattern--c23370e0-2f94-555e-8e18-e753a767bb51" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b31aa98a-9079-559d-968c-1aa46e7ddbdc", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--0e4b3b55-5f84-5074-9b3b-9404e99b67fd", "target_ref": "attack-pattern--9b65ffc8-0be6-5809-b228-a85033f790ba" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0f0a64b5-1be0-52be-94e6-285198d5b624", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--0e4b3b55-5f84-5074-9b3b-9404e99b67fd", "target_ref": "attack-pattern--fd40fed2-9093-5b5a-8ebd-5b288e3ae6c5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e27ac529-e573-5976-9d43-f9df46d281c3", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--0e4b3b55-5f84-5074-9b3b-9404e99b67fd", "target_ref": "attack-pattern--7a7e61f2-3d7c-5d61-90dc-9e198573731c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--bb3e6214-f10f-50cf-bdb3-d922e94a92c3", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--6b5af533-e806-54c4-8fe5-f990131e41d0", "target_ref": "attack-pattern--aa324a54-0e77-513e-bc77-dea4683702d2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9ed16541-e0a5-5add-b2f2-536c5bef9ea7", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--6b5af533-e806-54c4-8fe5-f990131e41d0", "target_ref": "attack-pattern--e45221c4-74e9-52ab-8e20-96d05003d65a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3e35914a-79f9-52a4-8fe0-d05d23ba1850", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--6b5af533-e806-54c4-8fe5-f990131e41d0", "target_ref": "attack-pattern--39564b4f-4af2-5b1a-8405-eb8cf9d2f12b" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4b6d30f8-42e2-5a53-9255-9678407051f7", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--6b5af533-e806-54c4-8fe5-f990131e41d0", "target_ref": "attack-pattern--d9e4a005-06a9-5cee-9f7c-234e20790118" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7cf04c61-0bdc-5521-a8fd-e3a1606afe99", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--6b5af533-e806-54c4-8fe5-f990131e41d0", "target_ref": "attack-pattern--5a491154-55c8-5abc-8449-0d48df41514b" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8ed35fc6-d1df-552e-8f6c-1c454fca67d0", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--6b5af533-e806-54c4-8fe5-f990131e41d0", "target_ref": "attack-pattern--9b65ffc8-0be6-5809-b228-a85033f790ba" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e33efd56-bcae-5edd-b3ef-9161fafdc07e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--6b5af533-e806-54c4-8fe5-f990131e41d0", "target_ref": "attack-pattern--0de49898-b977-5cf7-9608-eff3285c50c7" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f2c0da6b-e7a2-5c9e-bb9c-6673e48279c9", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--a82e10db-dcf6-5231-8299-6cedb873560e", "target_ref": "attack-pattern--a55b5859-fa73-5cab-a342-82b97187ea20" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--84070792-fc92-53a0-8882-0163b38f5b11", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--a82e10db-dcf6-5231-8299-6cedb873560e", "target_ref": "attack-pattern--b027592f-baee-5d2a-9d15-925aa1b77941" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7197d9e1-28fb-504e-8fbc-2dd148d4a6df", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--a82e10db-dcf6-5231-8299-6cedb873560e", "target_ref": "attack-pattern--ea13efc1-d0df-532c-8add-3d39dcd29713" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8ee1670b-3767-562d-85ca-09105c66e1ab", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--a82e10db-dcf6-5231-8299-6cedb873560e", "target_ref": "attack-pattern--b8d62a9c-14cd-503a-af8d-a26b825dffcd" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3df0dbe2-8598-59f1-905e-3d114b21d1c0", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--a82e10db-dcf6-5231-8299-6cedb873560e", "target_ref": "attack-pattern--bf6ef44d-fa93-5733-862a-26c1ac15a4b4" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7f90857f-6fb8-58ba-8e88-5133c1bc1949", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--a82e10db-dcf6-5231-8299-6cedb873560e", "target_ref": "attack-pattern--1d0e4f47-8c77-58a2-b885-f44145ed3bf4" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--aa4c14e0-99a0-5366-a2a4-8dc56dd20ff9", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--a82e10db-dcf6-5231-8299-6cedb873560e", "target_ref": "attack-pattern--3113300f-d067-5bda-b93a-de6cb0044037" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3a53d586-e332-5505-b089-06e3a63e9f8a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--a82e10db-dcf6-5231-8299-6cedb873560e", "target_ref": "attack-pattern--39564b4f-4af2-5b1a-8405-eb8cf9d2f12b" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ba35ee48-5b76-5d87-9386-3ad136303af2", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--82833c64-290a-554c-bc31-c2af67f2cab2", "target_ref": "attack-pattern--aa324a54-0e77-513e-bc77-dea4683702d2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d3bb8697-b5e9-55f7-9b72-80c63f2d0be3", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--82833c64-290a-554c-bc31-c2af67f2cab2", "target_ref": "attack-pattern--e45221c4-74e9-52ab-8e20-96d05003d65a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--29671266-ab3d-5e27-a073-f9c98753f583", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--82833c64-290a-554c-bc31-c2af67f2cab2", "target_ref": "attack-pattern--b6a77deb-14ae-59e3-b4b2-b73065972b6c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--cb2053b0-498f-5ef0-9ef4-7ae8971f32db", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--82833c64-290a-554c-bc31-c2af67f2cab2", "target_ref": "attack-pattern--9b65ffc8-0be6-5809-b228-a85033f790ba" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ef7b0de7-18da-58e4-a6b8-4ae931eec2bd", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--82833c64-290a-554c-bc31-c2af67f2cab2", "target_ref": "attack-pattern--2a21b0c6-c06c-5130-9114-0d760dcb5b2c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--cb308035-5c18-5ac1-ae59-8de690da4111", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--82833c64-290a-554c-bc31-c2af67f2cab2", "target_ref": "attack-pattern--9552d7a9-3083-569f-a641-d880fc8a27d5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--122e9734-2edf-5642-9839-92ff126c214c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--82833c64-290a-554c-bc31-c2af67f2cab2", "target_ref": "attack-pattern--0de49898-b977-5cf7-9608-eff3285c50c7" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d237e5f6-e742-56e7-9b62-9ebcccd94abd", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--6959c20e-2277-5961-9bda-ee8f1c8278dc", "target_ref": "attack-pattern--51de129b-35c6-52ab-baa1-4952b944dad8" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--717efce6-ba0b-5c2f-a729-f363cb750051", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--6959c20e-2277-5961-9bda-ee8f1c8278dc", "target_ref": "attack-pattern--e12a0e1d-8dac-5395-b37b-b0aa20814db2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--cbe8099c-e6c0-5259-9d98-371ca5ca8080", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--6959c20e-2277-5961-9bda-ee8f1c8278dc", "target_ref": "attack-pattern--b28eb96d-c303-5027-bc7d-413c3659495a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c68c7dbf-e415-5615-963e-63ddb1b2336d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--34d3bf3c-54f7-5956-a7dd-c969cdace21f", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4e31074b-f53d-5f8f-a51e-80e728cdc0eb", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--34d3bf3c-54f7-5956-a7dd-c969cdace21f", "target_ref": "attack-pattern--e69d7f82-fe18-5677-abba-9dd6347bc5a2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2616d930-cad7-52ff-9a2f-4500aa28094f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--34d3bf3c-54f7-5956-a7dd-c969cdace21f", "target_ref": "attack-pattern--093e472c-281c-5e78-9228-486255d3058a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c97c9931-8fae-5ae6-a6a0-8f86a8390f3c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--34d3bf3c-54f7-5956-a7dd-c969cdace21f", "target_ref": "attack-pattern--a33bad38-8e4f-5cdd-a0a4-779143c81d8d" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--32523ac5-8063-5dfc-a2fc-36882323eced", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--34d3bf3c-54f7-5956-a7dd-c969cdace21f", "target_ref": "attack-pattern--a7ebcbb2-dafe-5364-9932-e3d7bee02596" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--930eece2-c60b-5058-a1ac-1668f7c8147b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--34d3bf3c-54f7-5956-a7dd-c969cdace21f", "target_ref": "attack-pattern--2addb763-67df-5522-8864-f3f0d400252a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8d388f10-8a7b-5b16-80b6-acc616cbed2b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--34d3bf3c-54f7-5956-a7dd-c969cdace21f", "target_ref": "attack-pattern--1d0e4f47-8c77-58a2-b885-f44145ed3bf4" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f827896c-796c-5ffd-b821-eedfdee5dfa2", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--34d3bf3c-54f7-5956-a7dd-c969cdace21f", "target_ref": "attack-pattern--2a21b0c6-c06c-5130-9114-0d760dcb5b2c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8999f12c-6ab6-5208-8138-a9cbb7b42b22", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--6f0b252d-02b3-56a4-9512-65438d2d5e9c", "target_ref": "attack-pattern--58002197-8183-530c-9eea-d2d8532a9008" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--cf61cce2-6b8d-5a13-b569-bd88a6c63dd8", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--6f0b252d-02b3-56a4-9512-65438d2d5e9c", "target_ref": "attack-pattern--12a37f6f-1b04-52d2-9ad3-56bca9ba3350" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6e002cfe-1ffa-51f4-9235-14ccc450422d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--6f0b252d-02b3-56a4-9512-65438d2d5e9c", "target_ref": "attack-pattern--92ca3ca4-e512-53c5-be45-1f8b05cc913b" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d2f3cead-b7ad-5bf5-a0b4-fa14f40f5bb6", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--6f0b252d-02b3-56a4-9512-65438d2d5e9c", "target_ref": "attack-pattern--75d94806-bc98-57dc-894c-8ba499eb5540" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0ee2a94e-81a7-5b4f-ba79-012771e8cf47", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--59d11b85-db9b-56b3-b911-a06869c26471", "target_ref": "attack-pattern--f5bce1e3-3637-56df-8db9-94e793306171" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--82e81798-7996-5c4d-bcfd-a67ea5ca0c50", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--59d11b85-db9b-56b3-b911-a06869c26471", "target_ref": "attack-pattern--f81933a4-bfe2-528f-94ef-399577e5a682" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c747adb9-b277-570d-8bca-c38941d35937", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--043ecb34-7344-5ca6-af88-d9a3b208abd7", "target_ref": "attack-pattern--fd40fed2-9093-5b5a-8ebd-5b288e3ae6c5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b868e794-1e52-552f-ab65-b0544803658f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--043ecb34-7344-5ca6-af88-d9a3b208abd7", "target_ref": "attack-pattern--f81933a4-bfe2-528f-94ef-399577e5a682" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3bb1e531-29e9-5102-bb06-3d13d16d277d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--fc65c84f-75b3-5fab-884f-4dd9bf5cf33f", "target_ref": "attack-pattern--5deeb2fb-1df3-5566-8229-2e83bd241a08" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d0a80ed1-d50c-50a4-858c-f6b5cb7ee813", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--fc65c84f-75b3-5fab-884f-4dd9bf5cf33f", "target_ref": "attack-pattern--647504b6-bc6d-5c30-b18d-82c99e51b62d" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d54c2514-6e35-5c7a-9e4d-6a406968d2ae", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--fc65c84f-75b3-5fab-884f-4dd9bf5cf33f", "target_ref": "attack-pattern--f5bce1e3-3637-56df-8db9-94e793306171" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--936eb5fd-7ff4-5424-84c8-f917f785e1ec", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--fc65c84f-75b3-5fab-884f-4dd9bf5cf33f", "target_ref": "attack-pattern--f81933a4-bfe2-528f-94ef-399577e5a682" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b7705e4d-d0eb-587c-969a-c35294533a90", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--fc65c84f-75b3-5fab-884f-4dd9bf5cf33f", "target_ref": "attack-pattern--cf39fa63-9044-5279-8ea5-4acb64d53904" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3693afda-d108-5c99-ab8f-81edf737a13a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--fc65c84f-75b3-5fab-884f-4dd9bf5cf33f", "target_ref": "attack-pattern--44a15cd3-db68-5127-b8dd-cb96e537e3b7" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--cdfea692-8bda-5fc3-a503-436613ba59ee", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--4985a1a6-d512-58c4-ac01-565e47a16316", "target_ref": "attack-pattern--44a15cd3-db68-5127-b8dd-cb96e537e3b7" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--848fc443-13eb-52d0-9e4d-05a11be9ef68", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--4985a1a6-d512-58c4-ac01-565e47a16316", "target_ref": "attack-pattern--37433c31-ae6a-50f0-bfe3-22ac2f1747d9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--91967aa6-3798-51f7-b0dc-2f9f3fcd3a77", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--d2facfb9-55b5-57f6-a4d4-f8133a8d943e", "target_ref": "attack-pattern--8a373cd0-d1fc-5d17-916d-993d5cd3e7c1" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e8b9434b-e0d7-578d-9fa7-c3077fc81a3f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--b33cf8ae-db6f-5385-8594-a8cb71ace431", "target_ref": "attack-pattern--4950a164-f5b6-579d-b44d-af445947d99e" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f7d2e5dd-b67b-52bc-ac5a-3ed72e8f6d79", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--5ea92caa-6e87-5630-a816-3f5d3ae7ed34", "target_ref": "attack-pattern--cf39fa63-9044-5279-8ea5-4acb64d53904" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--386fde4c-0591-5a89-ae03-a4d7f710df09", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--5ea92caa-6e87-5630-a816-3f5d3ae7ed34", "target_ref": "attack-pattern--2a21b0c6-c06c-5130-9114-0d760dcb5b2c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6da028e2-57d1-588c-9498-2b7803fca1c8", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--5ea92caa-6e87-5630-a816-3f5d3ae7ed34", "target_ref": "attack-pattern--0de49898-b977-5cf7-9608-eff3285c50c7" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--072127c9-a14a-5d2f-badd-1788bd82a369", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--dbcae7d1-60fb-5bbb-8aa5-ece44830e988", "target_ref": "attack-pattern--3113300f-d067-5bda-b93a-de6cb0044037" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1b746c40-4607-5a44-9fb6-901d09efe8d0", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--dbcae7d1-60fb-5bbb-8aa5-ece44830e988", "target_ref": "attack-pattern--aa324a54-0e77-513e-bc77-dea4683702d2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b5d06701-93d4-5c39-a3a7-f92fdfa6974d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--dbcae7d1-60fb-5bbb-8aa5-ece44830e988", "target_ref": "attack-pattern--e45221c4-74e9-52ab-8e20-96d05003d65a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7a0871e8-65a8-5ac2-97a8-ccd13264a123", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--dbcae7d1-60fb-5bbb-8aa5-ece44830e988", "target_ref": "attack-pattern--d9e4a005-06a9-5cee-9f7c-234e20790118" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b873fdb1-16f4-5b41-b58f-3d450a5e7d88", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--dbcae7d1-60fb-5bbb-8aa5-ece44830e988", "target_ref": "attack-pattern--c23370e0-2f94-555e-8e18-e753a767bb51" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--74ad6aa3-f86d-5717-a0d2-0acdc8d6052d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--dbcae7d1-60fb-5bbb-8aa5-ece44830e988", "target_ref": "attack-pattern--5a491154-55c8-5abc-8449-0d48df41514b" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d67da2c8-ddad-58a0-8250-f6363ac85025", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--dbcae7d1-60fb-5bbb-8aa5-ece44830e988", "target_ref": "attack-pattern--d275621f-df75-55ac-974a-4589472dde87" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5de354b5-800e-54ad-bb41-30937ac83680", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--dbcae7d1-60fb-5bbb-8aa5-ece44830e988", "target_ref": "attack-pattern--f5bce1e3-3637-56df-8db9-94e793306171" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--12f899ec-12d7-5caa-8e48-2dc31453bf02", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--dbcae7d1-60fb-5bbb-8aa5-ece44830e988", "target_ref": "attack-pattern--f81933a4-bfe2-528f-94ef-399577e5a682" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ff736be3-f836-5c14-80ad-638c4f9736a2", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--dbcae7d1-60fb-5bbb-8aa5-ece44830e988", "target_ref": "attack-pattern--b6a77deb-14ae-59e3-b4b2-b73065972b6c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1c026f9a-d66e-5cbc-9aa7-64232a69bf7a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--dbcae7d1-60fb-5bbb-8aa5-ece44830e988", "target_ref": "attack-pattern--9b65ffc8-0be6-5809-b228-a85033f790ba" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--08aac28c-b60d-51fc-9df5-17bfe6af5a23", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--dbcae7d1-60fb-5bbb-8aa5-ece44830e988", "target_ref": "attack-pattern--fd40fed2-9093-5b5a-8ebd-5b288e3ae6c5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b6bfd4a9-a0aa-5ba0-be9c-26b78efca450", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--dbcae7d1-60fb-5bbb-8aa5-ece44830e988", "target_ref": "attack-pattern--cf39fa63-9044-5279-8ea5-4acb64d53904" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--08d0fc94-07f5-5cb1-9aae-a2dfbd6a35d6", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--dbcae7d1-60fb-5bbb-8aa5-ece44830e988", "target_ref": "attack-pattern--44a15cd3-db68-5127-b8dd-cb96e537e3b7" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3ffb402e-415a-59c6-be15-d39f09432b7e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--dbcae7d1-60fb-5bbb-8aa5-ece44830e988", "target_ref": "attack-pattern--37433c31-ae6a-50f0-bfe3-22ac2f1747d9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d905d382-9c16-510b-b3cf-736e26f7093b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--dbcae7d1-60fb-5bbb-8aa5-ece44830e988", "target_ref": "attack-pattern--8a373cd0-d1fc-5d17-916d-993d5cd3e7c1" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--837bcfa9-1163-5fad-bc42-8cb683da49a4", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--dbcae7d1-60fb-5bbb-8aa5-ece44830e988", "target_ref": "attack-pattern--4950a164-f5b6-579d-b44d-af445947d99e" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--66b01e0c-b8e2-5ef7-a35c-9a89db9f3c33", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--01f02050-cc06-593c-a921-e8ab898f429a", "target_ref": "attack-pattern--b6a77deb-14ae-59e3-b4b2-b73065972b6c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ed464a02-5e43-50a4-b4ff-e77d8676a7dc", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--3e4307df-8595-57e2-a65d-b8aaaa23e81d", "target_ref": "attack-pattern--2a21b0c6-c06c-5130-9114-0d760dcb5b2c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--533a7b60-0f62-5b87-8959-e6046814cd8b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--3e4307df-8595-57e2-a65d-b8aaaa23e81d", "target_ref": "attack-pattern--9552d7a9-3083-569f-a641-d880fc8a27d5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8db4b314-5542-5334-b719-fab63375600e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--3e4307df-8595-57e2-a65d-b8aaaa23e81d", "target_ref": "attack-pattern--0de49898-b977-5cf7-9608-eff3285c50c7" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5f13290f-7426-59ed-ab78-275df5e12b3b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--3e4307df-8595-57e2-a65d-b8aaaa23e81d", "target_ref": "attack-pattern--58002197-8183-530c-9eea-d2d8532a9008" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3e8663c6-5ef5-55fd-b93e-21a7b999ff4f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--3e4307df-8595-57e2-a65d-b8aaaa23e81d", "target_ref": "attack-pattern--7ec6ff5b-83cd-5725-adda-2b5d3a846414" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b393ca5b-59ac-5547-9b78-44bcc1014469", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--3e4307df-8595-57e2-a65d-b8aaaa23e81d", "target_ref": "attack-pattern--4dd355bc-2389-55c4-911c-1bac3744dbbc" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c103ab86-3cd2-5deb-adee-5193d129d868", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--3e4307df-8595-57e2-a65d-b8aaaa23e81d", "target_ref": "attack-pattern--12a37f6f-1b04-52d2-9ad3-56bca9ba3350" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--228fde7f-f6ba-519c-ba3d-25172584868e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--3e4307df-8595-57e2-a65d-b8aaaa23e81d", "target_ref": "attack-pattern--92ca3ca4-e512-53c5-be45-1f8b05cc913b" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--842fc75e-665d-5025-87f0-aa0b2ed51ff6", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--3e4307df-8595-57e2-a65d-b8aaaa23e81d", "target_ref": "attack-pattern--75d94806-bc98-57dc-894c-8ba499eb5540" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--104a82d8-f086-5c05-9503-4efc60962a87", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--be9a2640-cc30-5674-b229-2d5f1bd94f8b", "target_ref": "attack-pattern--2a21b0c6-c06c-5130-9114-0d760dcb5b2c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--cb5f1f3d-d878-5c5e-b902-36fe32a4e9fa", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--be9a2640-cc30-5674-b229-2d5f1bd94f8b", "target_ref": "attack-pattern--9552d7a9-3083-569f-a641-d880fc8a27d5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5b17128a-d6e6-5af4-8858-82d8ec52c2f8", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--be9a2640-cc30-5674-b229-2d5f1bd94f8b", "target_ref": "attack-pattern--0de49898-b977-5cf7-9608-eff3285c50c7" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4adec3c2-6716-5811-99ac-7ae1d10e620e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--2a2b0ba1-d486-52c0-92c5-95e040a51134", "target_ref": "attack-pattern--2a21b0c6-c06c-5130-9114-0d760dcb5b2c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--85ea943d-57b9-55ef-bb0f-6002c115b117", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--2a2b0ba1-d486-52c0-92c5-95e040a51134", "target_ref": "attack-pattern--9552d7a9-3083-569f-a641-d880fc8a27d5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7949edd8-57ce-51f1-b229-3086f0a0b113", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--37102889-cc74-5f7d-8d19-48568d94a335", "target_ref": "attack-pattern--2a21b0c6-c06c-5130-9114-0d760dcb5b2c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0c8dc2c7-e849-544f-b8f2-1081341e769d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--37102889-cc74-5f7d-8d19-48568d94a335", "target_ref": "attack-pattern--9552d7a9-3083-569f-a641-d880fc8a27d5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9b5c6d52-0d11-5e5e-93f5-05bd53b9ff12", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--8382e168-bf14-5b22-ad8a-f6843ae9917d", "target_ref": "attack-pattern--aa324a54-0e77-513e-bc77-dea4683702d2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b7e5d4e1-16df-5c68-a166-8634e5e5a836", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--8382e168-bf14-5b22-ad8a-f6843ae9917d", "target_ref": "attack-pattern--2a21b0c6-c06c-5130-9114-0d760dcb5b2c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--80a15398-d8bb-5c3e-a48a-9b31d359d994", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--8382e168-bf14-5b22-ad8a-f6843ae9917d", "target_ref": "attack-pattern--9552d7a9-3083-569f-a641-d880fc8a27d5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6e50d45a-e0cb-59c9-b34c-2e9c421b0ee6", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--8382e168-bf14-5b22-ad8a-f6843ae9917d", "target_ref": "attack-pattern--0de49898-b977-5cf7-9608-eff3285c50c7" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b7d743bb-90a7-5f1f-8ad7-04c48982e456", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--8382e168-bf14-5b22-ad8a-f6843ae9917d", "target_ref": "attack-pattern--9b65ffc8-0be6-5809-b228-a85033f790ba" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f384434d-df5d-54d8-b497-b50bdf4f5351", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--a1ff9392-2106-56ff-8788-2000d14f5b0a", "target_ref": "attack-pattern--d9e4a005-06a9-5cee-9f7c-234e20790118" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a8d8e65d-d19d-5a83-9352-a8b5826aea7f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--a1ff9392-2106-56ff-8788-2000d14f5b0a", "target_ref": "attack-pattern--c23370e0-2f94-555e-8e18-e753a767bb51" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1d5997c3-57c6-5cc5-a5f4-d337c615c9a6", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--a1ff9392-2106-56ff-8788-2000d14f5b0a", "target_ref": "attack-pattern--5a491154-55c8-5abc-8449-0d48df41514b" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--077b7b3f-8f10-5ce1-a9fb-7ef700ca0e0d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--a1ff9392-2106-56ff-8788-2000d14f5b0a", "target_ref": "attack-pattern--d275621f-df75-55ac-974a-4589472dde87" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--80cd838c-6a58-52bc-8b14-8a53a896f365", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--a1ff9392-2106-56ff-8788-2000d14f5b0a", "target_ref": "attack-pattern--3113300f-d067-5bda-b93a-de6cb0044037" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3dd93fe0-4456-59d7-a377-a35c36dac91a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--0b9f4268-084a-5bb8-8b77-9eb905dc2028", "target_ref": "attack-pattern--c23370e0-2f94-555e-8e18-e753a767bb51" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--00dc8188-4c6d-50eb-a510-a862fe2553e2", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--0b9f4268-084a-5bb8-8b77-9eb905dc2028", "target_ref": "attack-pattern--d275621f-df75-55ac-974a-4589472dde87" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5ee19953-f2c6-5ed8-80c9-8195bc53af1c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--e8f1a172-e586-55bf-ac18-f2e71868823f", "target_ref": "attack-pattern--3113300f-d067-5bda-b93a-de6cb0044037" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c1bc89db-054b-5ada-90b3-4f4e0abcdf33", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--e8f1a172-e586-55bf-ac18-f2e71868823f", "target_ref": "attack-pattern--91a0a76b-eaf0-5e8a-b6b9-7f62268ce853" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--46f2c9c5-641d-5d65-8d3b-2ef0ad54c2d8", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--e8f1a172-e586-55bf-ac18-f2e71868823f", "target_ref": "attack-pattern--aa324a54-0e77-513e-bc77-dea4683702d2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--dbb4de9d-6819-5fea-a8ce-026460dc8c38", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--e8f1a172-e586-55bf-ac18-f2e71868823f", "target_ref": "attack-pattern--e45221c4-74e9-52ab-8e20-96d05003d65a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1a2e0e3f-6fa2-5c1f-ae89-27ba3139f6f0", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--e8f1a172-e586-55bf-ac18-f2e71868823f", "target_ref": "attack-pattern--00534efe-a713-54c9-9ef3-5b12fd6d0c01" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2cf7fe01-d33e-5b1b-a936-2c8bda530f4d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--e8f1a172-e586-55bf-ac18-f2e71868823f", "target_ref": "attack-pattern--a55b5859-fa73-5cab-a342-82b97187ea20" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5329f4b1-d1cc-59c9-9fc3-63ba29f750af", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--e8f1a172-e586-55bf-ac18-f2e71868823f", "target_ref": "attack-pattern--2e0bf741-b432-58e7-8948-f5599bf0209e" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--75f08573-203f-55f9-8e03-a5d0f25e24b3", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--e8f1a172-e586-55bf-ac18-f2e71868823f", "target_ref": "attack-pattern--a6cff4d8-210c-5f75-9fb5-0f3318e8f8c3" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--70e46ee6-963c-55f1-8621-bd7bddbbed72", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--e8f1a172-e586-55bf-ac18-f2e71868823f", "target_ref": "attack-pattern--39564b4f-4af2-5b1a-8405-eb8cf9d2f12b" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--fd1da810-170a-5dd4-bced-a6550ec0b891", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--e8f1a172-e586-55bf-ac18-f2e71868823f", "target_ref": "attack-pattern--d9e4a005-06a9-5cee-9f7c-234e20790118" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a50c2b4a-db1d-5bd4-a9f7-837ced92ab51", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--e8f1a172-e586-55bf-ac18-f2e71868823f", "target_ref": "attack-pattern--c23370e0-2f94-555e-8e18-e753a767bb51" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--71059d73-98ea-5f1b-ba38-67af751b925f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--e8f1a172-e586-55bf-ac18-f2e71868823f", "target_ref": "attack-pattern--5a491154-55c8-5abc-8449-0d48df41514b" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a9282d85-6419-55b4-bb05-3a169664ba8b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--e8f1a172-e586-55bf-ac18-f2e71868823f", "target_ref": "attack-pattern--d275621f-df75-55ac-974a-4589472dde87" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--170a5dfd-bcd8-520b-a465-5624932cbe56", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--44f6d12e-3515-5504-9aa4-41bb152664a1", "target_ref": "attack-pattern--ea13efc1-d0df-532c-8add-3d39dcd29713" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--57d66645-b4b2-584e-84e4-c506a01ce431", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--44f6d12e-3515-5504-9aa4-41bb152664a1", "target_ref": "attack-pattern--a33bad38-8e4f-5cdd-a0a4-779143c81d8d" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ed6fbb09-586c-5aac-b14c-1af089db9ba2", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--44f6d12e-3515-5504-9aa4-41bb152664a1", "target_ref": "attack-pattern--888de015-81a7-52ec-9832-87baca164029" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--33933003-9829-5e23-a1b9-40d1f6f00436", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--ea2c1b0f-ebc9-54e2-a68f-314c8380f1f9", "target_ref": "attack-pattern--e69d7f82-fe18-5677-abba-9dd6347bc5a2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--659bd7ca-83e8-51fe-8dc8-1a9a66ec1231", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--ea2c1b0f-ebc9-54e2-a68f-314c8380f1f9", "target_ref": "attack-pattern--093e472c-281c-5e78-9228-486255d3058a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0d834086-3cfe-59a4-9e47-1da746cf7d30", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--ea2c1b0f-ebc9-54e2-a68f-314c8380f1f9", "target_ref": "attack-pattern--a7ebcbb2-dafe-5364-9932-e3d7bee02596" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6f8aaa94-1c4a-5bd6-99f1-376a42a3b95c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--04901282-62d1-524a-9961-55cb58e18f73", "target_ref": "attack-pattern--99c728d0-3e0c-55a4-906f-55c349257e5d" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--30998000-8ce2-55fa-990a-e48f9224fd2d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--58f0baa5-432b-5765-9598-e2a051775f86", "target_ref": "attack-pattern--4dd355bc-2389-55c4-911c-1bac3744dbbc" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3f945dff-c869-56fa-a3f5-61c42c5109e4", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--ef85cd4e-91fe-5597-bf63-13f0b2627b36", "target_ref": "attack-pattern--58002197-8183-530c-9eea-d2d8532a9008" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f165021e-5de4-5625-947e-94398df0289a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--ef85cd4e-91fe-5597-bf63-13f0b2627b36", "target_ref": "attack-pattern--92ca3ca4-e512-53c5-be45-1f8b05cc913b" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--79128177-8ca8-5dab-9536-90e27dd120ad", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--ef85cd4e-91fe-5597-bf63-13f0b2627b36", "target_ref": "attack-pattern--75d94806-bc98-57dc-894c-8ba499eb5540" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f5e9168f-fc31-5b7e-a4b6-a14b5aa8f273", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--ef3a9258-2595-51be-841c-aa3bbfb353de", "target_ref": "attack-pattern--58002197-8183-530c-9eea-d2d8532a9008" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8da0c39e-9eb3-5b9c-9671-2900f6eb4f7d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--ef3a9258-2595-51be-841c-aa3bbfb353de", "target_ref": "attack-pattern--12a37f6f-1b04-52d2-9ad3-56bca9ba3350" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--192a9c31-874f-557b-ade2-7a1779fed568", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--ef3a9258-2595-51be-841c-aa3bbfb353de", "target_ref": "attack-pattern--92ca3ca4-e512-53c5-be45-1f8b05cc913b" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2d081f9e-307d-5f54-b363-9949b056d842", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--5ada4075-2650-59b9-ba11-0f7c0ebad320", "target_ref": "attack-pattern--3113300f-d067-5bda-b93a-de6cb0044037" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ba49280d-7c53-53d3-a102-6bd4a1d3417c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--5ada4075-2650-59b9-ba11-0f7c0ebad320", "target_ref": "attack-pattern--91a0a76b-eaf0-5e8a-b6b9-7f62268ce853" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e94d41ee-1a6d-5213-8a24-f323ee8c6da6", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--5ada4075-2650-59b9-ba11-0f7c0ebad320", "target_ref": "attack-pattern--aa324a54-0e77-513e-bc77-dea4683702d2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1eb72ce6-ddc2-5969-b6d7-852df9ea5591", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--5ada4075-2650-59b9-ba11-0f7c0ebad320", "target_ref": "attack-pattern--e45221c4-74e9-52ab-8e20-96d05003d65a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--bffe5623-535e-56d4-8c1b-d564c259b907", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--5ada4075-2650-59b9-ba11-0f7c0ebad320", "target_ref": "attack-pattern--00534efe-a713-54c9-9ef3-5b12fd6d0c01" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--724d4e0a-a6a4-5a7f-a7c9-97aee0434b3d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--5ada4075-2650-59b9-ba11-0f7c0ebad320", "target_ref": "attack-pattern--d9e4a005-06a9-5cee-9f7c-234e20790118" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--54af862d-cb6e-5ff4-9731-21af1eb040d2", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--5ada4075-2650-59b9-ba11-0f7c0ebad320", "target_ref": "attack-pattern--c23370e0-2f94-555e-8e18-e753a767bb51" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--483de585-7896-5f6f-9996-f56b86e0d9a6", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--5ada4075-2650-59b9-ba11-0f7c0ebad320", "target_ref": "attack-pattern--5a491154-55c8-5abc-8449-0d48df41514b" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--bd14b37b-0a7d-5879-98c5-45052a641a0c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--5ada4075-2650-59b9-ba11-0f7c0ebad320", "target_ref": "attack-pattern--d275621f-df75-55ac-974a-4589472dde87" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f56678b8-6e90-5a95-9b28-7d9f3a0a4616", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--5ada4075-2650-59b9-ba11-0f7c0ebad320", "target_ref": "attack-pattern--f5bce1e3-3637-56df-8db9-94e793306171" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--893c9de4-93fd-5ce4-a171-8db80acb0d85", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--5ada4075-2650-59b9-ba11-0f7c0ebad320", "target_ref": "attack-pattern--f81933a4-bfe2-528f-94ef-399577e5a682" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--36c77ddc-df40-55b1-97f1-33fe171bd2af", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--5ada4075-2650-59b9-ba11-0f7c0ebad320", "target_ref": "attack-pattern--b6a77deb-14ae-59e3-b4b2-b73065972b6c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2817fb38-d0ef-5848-b63b-bf893e181c9f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--5ada4075-2650-59b9-ba11-0f7c0ebad320", "target_ref": "attack-pattern--9b65ffc8-0be6-5809-b228-a85033f790ba" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4288fa4c-b9be-513c-8478-facf34855bf2", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--5ada4075-2650-59b9-ba11-0f7c0ebad320", "target_ref": "attack-pattern--fd40fed2-9093-5b5a-8ebd-5b288e3ae6c5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8fdc37bf-c4cf-5d9d-8bfc-bb92f878c7fe", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--5ada4075-2650-59b9-ba11-0f7c0ebad320", "target_ref": "attack-pattern--cf39fa63-9044-5279-8ea5-4acb64d53904" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--018d8c3a-5ca9-5b92-925f-589fbaa62001", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--5ada4075-2650-59b9-ba11-0f7c0ebad320", "target_ref": "attack-pattern--44a15cd3-db68-5127-b8dd-cb96e537e3b7" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6a91d527-44c5-5fbb-b7d6-55f64236d20f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--5ada4075-2650-59b9-ba11-0f7c0ebad320", "target_ref": "attack-pattern--37433c31-ae6a-50f0-bfe3-22ac2f1747d9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5ed929ee-89dd-5ad3-af3e-446097588b36", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--5ada4075-2650-59b9-ba11-0f7c0ebad320", "target_ref": "attack-pattern--8a373cd0-d1fc-5d17-916d-993d5cd3e7c1" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--71f75786-f9a6-50e3-a651-3cb2bc111fa2", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--5ada4075-2650-59b9-ba11-0f7c0ebad320", "target_ref": "attack-pattern--4950a164-f5b6-579d-b44d-af445947d99e" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1eb5cf9c-4edd-51ff-985a-c5e873f46c6a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--b91ae2ee-bab0-592d-a5e0-91bab1b0ca18", "target_ref": "attack-pattern--f5bce1e3-3637-56df-8db9-94e793306171" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8942cbce-74da-5001-9c34-d2d0be8ee7fb", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--b91ae2ee-bab0-592d-a5e0-91bab1b0ca18", "target_ref": "attack-pattern--f81933a4-bfe2-528f-94ef-399577e5a682" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d8e9bdaa-ada9-5971-9f59-91775a39dfb2", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--b91ae2ee-bab0-592d-a5e0-91bab1b0ca18", "target_ref": "attack-pattern--b6a77deb-14ae-59e3-b4b2-b73065972b6c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b288646e-e1ba-5c67-9b04-2b54f360e687", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--b91ae2ee-bab0-592d-a5e0-91bab1b0ca18", "target_ref": "attack-pattern--9b65ffc8-0be6-5809-b228-a85033f790ba" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6020a320-9bb7-5fd4-ad23-cc5e4d989a9e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--b91ae2ee-bab0-592d-a5e0-91bab1b0ca18", "target_ref": "attack-pattern--fd40fed2-9093-5b5a-8ebd-5b288e3ae6c5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ab0f9491-4d76-5762-8f6b-60bed455351e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--b91ae2ee-bab0-592d-a5e0-91bab1b0ca18", "target_ref": "attack-pattern--cf39fa63-9044-5279-8ea5-4acb64d53904" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--82db9b61-ea65-5588-9807-601d88cd8901", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--b91ae2ee-bab0-592d-a5e0-91bab1b0ca18", "target_ref": "attack-pattern--44a15cd3-db68-5127-b8dd-cb96e537e3b7" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f36fffd8-bb12-5c6d-a4fe-0aa3053e571d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--b91ae2ee-bab0-592d-a5e0-91bab1b0ca18", "target_ref": "attack-pattern--37433c31-ae6a-50f0-bfe3-22ac2f1747d9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9fc68f22-cb3c-5c08-881d-6b7648af0bf4", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--b91ae2ee-bab0-592d-a5e0-91bab1b0ca18", "target_ref": "attack-pattern--8a373cd0-d1fc-5d17-916d-993d5cd3e7c1" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--cc743421-c833-5129-9550-9a23e52a29b3", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--b91ae2ee-bab0-592d-a5e0-91bab1b0ca18", "target_ref": "attack-pattern--4950a164-f5b6-579d-b44d-af445947d99e" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5581ddb9-91ac-5a36-937d-09e96d4cccb3", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--b91ae2ee-bab0-592d-a5e0-91bab1b0ca18", "target_ref": "attack-pattern--2a21b0c6-c06c-5130-9114-0d760dcb5b2c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7394a10f-726e-51ed-b8f2-6fa2c5a2c3b0", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--b91ae2ee-bab0-592d-a5e0-91bab1b0ca18", "target_ref": "attack-pattern--9552d7a9-3083-569f-a641-d880fc8a27d5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--724d4f73-8919-5ef7-b07e-0fbea3801b4e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--b91ae2ee-bab0-592d-a5e0-91bab1b0ca18", "target_ref": "attack-pattern--0de49898-b977-5cf7-9608-eff3285c50c7" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0836ae32-29be-5c07-8fca-78721ab021ac", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--f66db0d5-a086-59e4-b95c-2946dc1ae340", "target_ref": "attack-pattern--f5bce1e3-3637-56df-8db9-94e793306171" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--bc1a5ceb-36db-55b7-8d74-fddf256b028b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--f66db0d5-a086-59e4-b95c-2946dc1ae340", "target_ref": "attack-pattern--f81933a4-bfe2-528f-94ef-399577e5a682" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d5e9f8b0-ecdd-5a0b-9b1c-4eeb40a468fe", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--f66db0d5-a086-59e4-b95c-2946dc1ae340", "target_ref": "attack-pattern--b6a77deb-14ae-59e3-b4b2-b73065972b6c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--cf62cbda-1413-59bb-9c82-8aacc288991a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--f66db0d5-a086-59e4-b95c-2946dc1ae340", "target_ref": "attack-pattern--9b65ffc8-0be6-5809-b228-a85033f790ba" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d4463dc3-b269-580a-a311-78cf76803b49", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--f66db0d5-a086-59e4-b95c-2946dc1ae340", "target_ref": "attack-pattern--fd40fed2-9093-5b5a-8ebd-5b288e3ae6c5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--89806103-4aa0-5316-aa0e-e6c2705f5ae1", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--f66db0d5-a086-59e4-b95c-2946dc1ae340", "target_ref": "attack-pattern--cf39fa63-9044-5279-8ea5-4acb64d53904" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--380f3840-0b3e-5a9a-830c-6772a252971a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--f66db0d5-a086-59e4-b95c-2946dc1ae340", "target_ref": "attack-pattern--44a15cd3-db68-5127-b8dd-cb96e537e3b7" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d2f2addb-935e-5e9d-88bd-84d43e45e832", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--f66db0d5-a086-59e4-b95c-2946dc1ae340", "target_ref": "attack-pattern--37433c31-ae6a-50f0-bfe3-22ac2f1747d9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--30a2c3fc-a4e2-5dea-a53a-0a15aa7d2cc3", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--f66db0d5-a086-59e4-b95c-2946dc1ae340", "target_ref": "attack-pattern--8a373cd0-d1fc-5d17-916d-993d5cd3e7c1" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6604e49a-9afd-584b-b735-58b462337db0", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--f66db0d5-a086-59e4-b95c-2946dc1ae340", "target_ref": "attack-pattern--4950a164-f5b6-579d-b44d-af445947d99e" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5e7beb63-5798-5a94-b832-2a3b16c09b33", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--f66db0d5-a086-59e4-b95c-2946dc1ae340", "target_ref": "attack-pattern--0de49898-b977-5cf7-9608-eff3285c50c7" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--98660299-eef6-5eae-889b-56af04a23cc2", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--ebec25cb-37ca-5aa8-9b99-b8289275131d", "target_ref": "attack-pattern--f5bce1e3-3637-56df-8db9-94e793306171" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b5d34841-9c89-5f04-acb7-663a50faf274", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--ebec25cb-37ca-5aa8-9b99-b8289275131d", "target_ref": "attack-pattern--f81933a4-bfe2-528f-94ef-399577e5a682" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3c10d6bc-97fb-5869-acb0-a502eda3d037", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--ebec25cb-37ca-5aa8-9b99-b8289275131d", "target_ref": "attack-pattern--b6a77deb-14ae-59e3-b4b2-b73065972b6c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--40b9a0b0-891c-5964-93e9-eed7ea904293", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--ebec25cb-37ca-5aa8-9b99-b8289275131d", "target_ref": "attack-pattern--9b65ffc8-0be6-5809-b228-a85033f790ba" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3298fdc9-a7f8-5d9e-a642-c3a563325271", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--ebec25cb-37ca-5aa8-9b99-b8289275131d", "target_ref": "attack-pattern--fd40fed2-9093-5b5a-8ebd-5b288e3ae6c5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ab1d882c-5b86-5131-976e-a6e587093154", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--ebec25cb-37ca-5aa8-9b99-b8289275131d", "target_ref": "attack-pattern--cf39fa63-9044-5279-8ea5-4acb64d53904" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--304577e7-c049-5f66-b3b9-f59b81ef0a1a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--ebec25cb-37ca-5aa8-9b99-b8289275131d", "target_ref": "attack-pattern--44a15cd3-db68-5127-b8dd-cb96e537e3b7" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--33321ac3-c7ca-55e6-ad8a-d80a2658166d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--ebec25cb-37ca-5aa8-9b99-b8289275131d", "target_ref": "attack-pattern--37433c31-ae6a-50f0-bfe3-22ac2f1747d9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--74a83c4a-954e-59a3-bf4a-694309a36f1e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--ebec25cb-37ca-5aa8-9b99-b8289275131d", "target_ref": "attack-pattern--8a373cd0-d1fc-5d17-916d-993d5cd3e7c1" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a1018c56-2bdf-5610-9518-531667cce43a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--ebec25cb-37ca-5aa8-9b99-b8289275131d", "target_ref": "attack-pattern--4950a164-f5b6-579d-b44d-af445947d99e" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2a7698df-6286-5bca-8475-7bfec3741682", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--ebec25cb-37ca-5aa8-9b99-b8289275131d", "target_ref": "attack-pattern--2a21b0c6-c06c-5130-9114-0d760dcb5b2c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e5e999ad-bec2-5a72-914d-91970cb46424", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--ebec25cb-37ca-5aa8-9b99-b8289275131d", "target_ref": "attack-pattern--9552d7a9-3083-569f-a641-d880fc8a27d5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9827ecdc-219e-584c-a628-85784b0b7e4e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--ebec25cb-37ca-5aa8-9b99-b8289275131d", "target_ref": "attack-pattern--0de49898-b977-5cf7-9608-eff3285c50c7" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f353a359-4bdf-5a94-bddb-f985d208bb40", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--9fbccd98-5d69-565c-ae1e-512ed8496492", "target_ref": "attack-pattern--2a21b0c6-c06c-5130-9114-0d760dcb5b2c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--77afdf89-3ffe-567d-a5ad-ff86dfc90221", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--9fbccd98-5d69-565c-ae1e-512ed8496492", "target_ref": "attack-pattern--9552d7a9-3083-569f-a641-d880fc8a27d5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7e920ff2-72ec-5ec7-b79f-d9b9342e504b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--9fbccd98-5d69-565c-ae1e-512ed8496492", "target_ref": "attack-pattern--0de49898-b977-5cf7-9608-eff3285c50c7" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4708e597-8300-5910-8eaa-be39a134360b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--c21ebe1c-c2c2-574c-b4e8-9a56c424c27c", "target_ref": "attack-pattern--2a21b0c6-c06c-5130-9114-0d760dcb5b2c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--fada6043-7a7c-58e9-9f01-166ba41e17db", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--c21ebe1c-c2c2-574c-b4e8-9a56c424c27c", "target_ref": "attack-pattern--9552d7a9-3083-569f-a641-d880fc8a27d5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7916e042-0153-5178-947c-9c62b0953e24", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--c21ebe1c-c2c2-574c-b4e8-9a56c424c27c", "target_ref": "attack-pattern--0de49898-b977-5cf7-9608-eff3285c50c7" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e51af97e-bab3-5f58-b684-682868272155", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--c21ebe1c-c2c2-574c-b4e8-9a56c424c27c", "target_ref": "attack-pattern--cf39fa63-9044-5279-8ea5-4acb64d53904" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4484aed2-6dc5-5e94-b227-2005213e50f0", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--d21d281b-32da-54da-aa63-dc2279c7ff5a", "target_ref": "attack-pattern--5deeb2fb-1df3-5566-8229-2e83bd241a08" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4f265a64-eda3-54b6-855e-d14f875c884d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--d21d281b-32da-54da-aa63-dc2279c7ff5a", "target_ref": "attack-pattern--647504b6-bc6d-5c30-b18d-82c99e51b62d" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d3c91199-4ff5-5d65-b1be-4c5eba1a925f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--d21d281b-32da-54da-aa63-dc2279c7ff5a", "target_ref": "attack-pattern--cccae07c-951c-54bd-bfa4-af87de266370" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--86891ace-3055-53d0-8701-53761f7f87fb", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--d21d281b-32da-54da-aa63-dc2279c7ff5a", "target_ref": "attack-pattern--f5bce1e3-3637-56df-8db9-94e793306171" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--46b59c0a-53dd-53da-acd7-6966b49c9f01", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--d21d281b-32da-54da-aa63-dc2279c7ff5a", "target_ref": "attack-pattern--f81933a4-bfe2-528f-94ef-399577e5a682" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a32610e9-e76c-58fc-b185-b8d242a83607", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--d21d281b-32da-54da-aa63-dc2279c7ff5a", "target_ref": "attack-pattern--9b65ffc8-0be6-5809-b228-a85033f790ba" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7a018354-5260-596d-bfde-bfbd1a4efea6", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--d21d281b-32da-54da-aa63-dc2279c7ff5a", "target_ref": "attack-pattern--fd40fed2-9093-5b5a-8ebd-5b288e3ae6c5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--acd40aaf-ead2-5b82-83b1-d0795e3d05fd", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--d21d281b-32da-54da-aa63-dc2279c7ff5a", "target_ref": "attack-pattern--cf39fa63-9044-5279-8ea5-4acb64d53904" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--818e8b08-0ec9-55d3-949f-b2cd421aff39", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--d21d281b-32da-54da-aa63-dc2279c7ff5a", "target_ref": "attack-pattern--2a21b0c6-c06c-5130-9114-0d760dcb5b2c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--aff667f3-24f7-51fd-a017-7a8426679a2b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--d21d281b-32da-54da-aa63-dc2279c7ff5a", "target_ref": "attack-pattern--9552d7a9-3083-569f-a641-d880fc8a27d5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0cdcca73-4935-578d-806a-8f35fc09d71b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--d21d281b-32da-54da-aa63-dc2279c7ff5a", "target_ref": "attack-pattern--0de49898-b977-5cf7-9608-eff3285c50c7" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--871520fb-e548-569c-b502-5a5405e75d3a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--c392e9e5-92b6-5d9c-90f7-9a483f648389", "target_ref": "attack-pattern--f5bce1e3-3637-56df-8db9-94e793306171" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--064c7036-6546-5165-93e2-4e016d3dbc13", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--c392e9e5-92b6-5d9c-90f7-9a483f648389", "target_ref": "attack-pattern--f81933a4-bfe2-528f-94ef-399577e5a682" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e234e9a5-ce3a-5502-bdee-5d5f510f86e1", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--c392e9e5-92b6-5d9c-90f7-9a483f648389", "target_ref": "attack-pattern--b6a77deb-14ae-59e3-b4b2-b73065972b6c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f300b651-0f68-5c86-b982-960846bebcd3", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--c392e9e5-92b6-5d9c-90f7-9a483f648389", "target_ref": "attack-pattern--9b65ffc8-0be6-5809-b228-a85033f790ba" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--20fbef16-d24e-5526-aa41-df713562271d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--c392e9e5-92b6-5d9c-90f7-9a483f648389", "target_ref": "attack-pattern--fd40fed2-9093-5b5a-8ebd-5b288e3ae6c5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e6a4a9a4-ca0c-5dcd-81f7-7c1555a04612", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--c392e9e5-92b6-5d9c-90f7-9a483f648389", "target_ref": "attack-pattern--cf39fa63-9044-5279-8ea5-4acb64d53904" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9ffbdb11-c1fe-5ec1-9f20-d180cc7afa10", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--c392e9e5-92b6-5d9c-90f7-9a483f648389", "target_ref": "attack-pattern--44a15cd3-db68-5127-b8dd-cb96e537e3b7" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--df936b73-16d3-5210-8e20-699ff35a66fc", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--c392e9e5-92b6-5d9c-90f7-9a483f648389", "target_ref": "attack-pattern--37433c31-ae6a-50f0-bfe3-22ac2f1747d9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7fdee349-3d41-5063-94a4-a758587c5ef4", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--c392e9e5-92b6-5d9c-90f7-9a483f648389", "target_ref": "attack-pattern--8a373cd0-d1fc-5d17-916d-993d5cd3e7c1" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--745b1fea-42f0-52cc-b98b-3451cb38e37d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--c392e9e5-92b6-5d9c-90f7-9a483f648389", "target_ref": "attack-pattern--4950a164-f5b6-579d-b44d-af445947d99e" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4b3167cb-b026-5890-8042-cbecf77e8974", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--c392e9e5-92b6-5d9c-90f7-9a483f648389", "target_ref": "attack-pattern--2a21b0c6-c06c-5130-9114-0d760dcb5b2c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--79456455-7842-5315-b137-0576a9dcf1a7", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--c392e9e5-92b6-5d9c-90f7-9a483f648389", "target_ref": "attack-pattern--9552d7a9-3083-569f-a641-d880fc8a27d5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2465b92f-1e32-594c-89c2-c8323e0f1424", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--c392e9e5-92b6-5d9c-90f7-9a483f648389", "target_ref": "attack-pattern--0de49898-b977-5cf7-9608-eff3285c50c7" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5d833f89-218a-5d59-a8d2-1de5fde3fe8e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--c392e9e5-92b6-5d9c-90f7-9a483f648389", "target_ref": "attack-pattern--bf6ef44d-fa93-5733-862a-26c1ac15a4b4" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e70a2dab-8316-5489-8161-6cbfc3eb69e2", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--c392e9e5-92b6-5d9c-90f7-9a483f648389", "target_ref": "attack-pattern--1d0e4f47-8c77-58a2-b885-f44145ed3bf4" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--edcd1fe7-6e3b-5c09-b7c0-65e724766897", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--1bab4ab0-e72b-5c94-aec8-d24c8d844d30", "target_ref": "attack-pattern--2a21b0c6-c06c-5130-9114-0d760dcb5b2c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--50f134d1-a753-5832-a69c-fcf5644d4baa", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--1bab4ab0-e72b-5c94-aec8-d24c8d844d30", "target_ref": "attack-pattern--9552d7a9-3083-569f-a641-d880fc8a27d5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2f992dec-1c34-539b-b54d-d7d1887223fe", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--1bab4ab0-e72b-5c94-aec8-d24c8d844d30", "target_ref": "attack-pattern--aa324a54-0e77-513e-bc77-dea4683702d2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--dbc72958-5703-53bc-b862-29edbfca0f40", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--1bab4ab0-e72b-5c94-aec8-d24c8d844d30", "target_ref": "attack-pattern--58002197-8183-530c-9eea-d2d8532a9008" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ef61d899-958e-5e58-8b6e-a15ccc79dde2", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--1bab4ab0-e72b-5c94-aec8-d24c8d844d30", "target_ref": "attack-pattern--7ec6ff5b-83cd-5725-adda-2b5d3a846414" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0e73a422-01d6-5fa5-8a9c-12662b39fe32", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--1bab4ab0-e72b-5c94-aec8-d24c8d844d30", "target_ref": "attack-pattern--92ca3ca4-e512-53c5-be45-1f8b05cc913b" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--19bdcc86-893a-545d-903f-2862981a5f43", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--1bab4ab0-e72b-5c94-aec8-d24c8d844d30", "target_ref": "attack-pattern--75d94806-bc98-57dc-894c-8ba499eb5540" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8de7e946-91d7-5964-a02c-42201a8d601a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--58aa5034-3b68-5cbc-a5fa-995eb8b0e702", "target_ref": "attack-pattern--e69d7f82-fe18-5677-abba-9dd6347bc5a2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4234823a-b859-5aaf-8458-814886de841d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--58aa5034-3b68-5cbc-a5fa-995eb8b0e702", "target_ref": "attack-pattern--093e472c-281c-5e78-9228-486255d3058a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2bb7e704-0396-5822-9646-a2a5637efe69", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--58aa5034-3b68-5cbc-a5fa-995eb8b0e702", "target_ref": "attack-pattern--2addb763-67df-5522-8864-f3f0d400252a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--68f0fae0-3bcf-5208-b442-4fc41245b861", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--58aa5034-3b68-5cbc-a5fa-995eb8b0e702", "target_ref": "attack-pattern--c6390ae8-9835-52c2-8fd7-fac5b37acc18" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7b37fa62-7d94-533d-934b-08848ddd32b9", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--58aa5034-3b68-5cbc-a5fa-995eb8b0e702", "target_ref": "attack-pattern--fccf2600-ec82-53d1-b3ba-0384a28f8be3" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--61968c3e-39b5-5c40-ae8d-bfe57ebbcaff", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--58aa5034-3b68-5cbc-a5fa-995eb8b0e702", "target_ref": "attack-pattern--f474475e-47e9-57d5-b8d1-35077726b770" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2ef8b9f9-1bdc-58c3-9c6e-cf7d13f2431c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--8134949d-9274-53e5-8503-2522685c7c5b", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5337fbf1-0871-5f80-9f54-174fb34bec9d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--8134949d-9274-53e5-8503-2522685c7c5b", "target_ref": "attack-pattern--e69d7f82-fe18-5677-abba-9dd6347bc5a2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3c9870bc-d7d6-53b9-93aa-47f538826a5b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--8134949d-9274-53e5-8503-2522685c7c5b", "target_ref": "attack-pattern--093e472c-281c-5e78-9228-486255d3058a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e6d03dd3-966e-50c6-bd76-fe7bc0a0da26", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--8134949d-9274-53e5-8503-2522685c7c5b", "target_ref": "attack-pattern--a7ebcbb2-dafe-5364-9932-e3d7bee02596" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--350dd59c-201e-518e-b569-475b0de4003e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--8134949d-9274-53e5-8503-2522685c7c5b", "target_ref": "attack-pattern--f474475e-47e9-57d5-b8d1-35077726b770" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--badfc6a4-1f33-5455-9595-b5e5b7b20926", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--4350d990-7946-5df8-935c-c7a1a85409fb", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--fe1c0022-2ca1-5c35-a41e-6b6ef257955d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--4350d990-7946-5df8-935c-c7a1a85409fb", "target_ref": "attack-pattern--e69d7f82-fe18-5677-abba-9dd6347bc5a2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--810933bb-eaf6-5f18-8a20-cdfaa1393ef0", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--4350d990-7946-5df8-935c-c7a1a85409fb", "target_ref": "attack-pattern--093e472c-281c-5e78-9228-486255d3058a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1f66eee8-16ab-5310-8e60-6137dfcaedac", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--4350d990-7946-5df8-935c-c7a1a85409fb", "target_ref": "attack-pattern--2addb763-67df-5522-8864-f3f0d400252a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--538d1269-7131-5347-bdf1-696c88eaca7f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--4350d990-7946-5df8-935c-c7a1a85409fb", "target_ref": "attack-pattern--c6390ae8-9835-52c2-8fd7-fac5b37acc18" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--448b3443-22b4-58c0-9821-49d14967af73", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--4350d990-7946-5df8-935c-c7a1a85409fb", "target_ref": "attack-pattern--fccf2600-ec82-53d1-b3ba-0384a28f8be3" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c8caa48b-9eb4-586d-b25b-5ab8998c12fa", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--4350d990-7946-5df8-935c-c7a1a85409fb", "target_ref": "attack-pattern--bf6ef44d-fa93-5733-862a-26c1ac15a4b4" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6d5c74d2-beb6-5b0d-bbaf-7e74b4bdc2b9", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--4350d990-7946-5df8-935c-c7a1a85409fb", "target_ref": "attack-pattern--1d0e4f47-8c77-58a2-b885-f44145ed3bf4" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--55140691-e4c4-54ce-9d71-a5b6292da0ec", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--2a81b87b-335b-5e22-9976-4bc281356122", "target_ref": "attack-pattern--0fd4fcde-3464-5d2d-86ac-7c68035870a3" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3d792ffd-35f4-58a6-96f2-73a87afd455b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--2a81b87b-335b-5e22-9976-4bc281356122", "target_ref": "attack-pattern--8ebc4ef1-736a-5a29-a376-a008444a2d2f" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--115f0d58-fea1-5922-ab66-c7a3c3cec23c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--2a81b87b-335b-5e22-9976-4bc281356122", "target_ref": "attack-pattern--19b22847-2104-5eb9-a74c-4e7ef6195ab8" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5e5e580f-3f6c-5a31-9b79-9657098bc15f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--2a81b87b-335b-5e22-9976-4bc281356122", "target_ref": "attack-pattern--8477975b-da56-555e-8bc4-de888d978403" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3d53ad0e-2fc4-58b7-9c08-cfb4394dad9c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--2a81b87b-335b-5e22-9976-4bc281356122", "target_ref": "attack-pattern--eaa6f530-4f94-5ca6-b2d9-cbb9f56636a0" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3866d8a3-3652-5fef-945a-d88a32ec664f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--fd0e3140-61da-5d11-8062-b7fe0b9a6cb0", "target_ref": "attack-pattern--8477975b-da56-555e-8bc4-de888d978403" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f573bd29-ad7a-57b9-888d-6e5e2f64280d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--fd0e3140-61da-5d11-8062-b7fe0b9a6cb0", "target_ref": "attack-pattern--6d6dfb01-6c40-58c3-ac5a-98b6042866bd" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a6be0987-b2e1-5582-9c07-5456c5a37d15", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--fd0e3140-61da-5d11-8062-b7fe0b9a6cb0", "target_ref": "attack-pattern--aebe2a72-a361-5ab4-8465-3a32a4dbd638" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--293f38ac-be0c-5043-9baf-094ff9f36304", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--fd0e3140-61da-5d11-8062-b7fe0b9a6cb0", "target_ref": "attack-pattern--eaa6f530-4f94-5ca6-b2d9-cbb9f56636a0" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--647e37a0-cc4b-52be-bee7-f2e72dbb62d3", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--951df08e-c5a9-548e-8191-1c0b5a944b53", "target_ref": "attack-pattern--f43b3cdc-ed19-5ad0-b661-706c665d9f83" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f25b5da8-49a6-5ae9-b37b-968bb998e724", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--951df08e-c5a9-548e-8191-1c0b5a944b53", "target_ref": "attack-pattern--6d6dfb01-6c40-58c3-ac5a-98b6042866bd" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--62c35a51-c38c-59cf-905a-ad14deabc3a0", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--951df08e-c5a9-548e-8191-1c0b5a944b53", "target_ref": "attack-pattern--aebe2a72-a361-5ab4-8465-3a32a4dbd638" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--88a49a4e-f165-5573-baf8-7229250621a7", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--951df08e-c5a9-548e-8191-1c0b5a944b53", "target_ref": "attack-pattern--a9cff60c-a2e1-5a72-ad92-358506cc8678" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--52e9422f-4b5e-5cc1-b93a-ef0be63aa3c7", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--951df08e-c5a9-548e-8191-1c0b5a944b53", "target_ref": "attack-pattern--bf1f9ad7-4abc-5204-8d5c-d597d194c7e0" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--65ad6c66-0407-5404-849c-833eab9f2068", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--25319b1c-1c78-5d59-b878-da5dbb98dd45", "target_ref": "attack-pattern--88316cc3-a9f9-5dc9-96e0-0f8889ca0234" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0711a9cf-4b16-58a5-9504-9b4a444d6514", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--25319b1c-1c78-5d59-b878-da5dbb98dd45", "target_ref": "attack-pattern--419b5ccf-6a56-5639-a130-82e3f14a544e" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0412ad6e-8f0d-5fc1-83ba-b744411fe073", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--25319b1c-1c78-5d59-b878-da5dbb98dd45", "target_ref": "attack-pattern--eaa6f530-4f94-5ca6-b2d9-cbb9f56636a0" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--85362bee-62fc-58ef-8970-f08297152d98", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--25319b1c-1c78-5d59-b878-da5dbb98dd45", "target_ref": "attack-pattern--71ecfc99-0efa-5c66-ad46-d0a4851cee1c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7d3700d4-a5b9-5ab7-b348-66ff325ebb07", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--25319b1c-1c78-5d59-b878-da5dbb98dd45", "target_ref": "attack-pattern--9552d7a9-3083-569f-a641-d880fc8a27d5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--11d166c2-fcc8-5998-a494-f18b7ccdc8d4", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--7f27f27f-c224-56e5-a2f5-dfdf156190c0", "target_ref": "attack-pattern--7861ffbc-2d68-5482-ba5f-32e5a630a7a6" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2e56b3ac-c50c-5e3f-a8fd-56c209033146", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--7f27f27f-c224-56e5-a2f5-dfdf156190c0", "target_ref": "attack-pattern--77b517cc-4b13-5a1b-8262-fb171254ddb5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5f072f53-3db4-5076-95b6-aff5283a8801", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--7f27f27f-c224-56e5-a2f5-dfdf156190c0", "target_ref": "attack-pattern--414a6469-36be-5ecd-9603-290930d42b86" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6c1ec146-f238-5962-9222-27fd839cae1f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "mitigates", "source_ref": "course-of-action--7f27f27f-c224-56e5-a2f5-dfdf156190c0", "target_ref": "attack-pattern--f0e70cea-8e64-51c4-9f64-09ea2bf642aa" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7809adcc-751b-593e-aef8-dcc87c3238c1", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "tool--cd4a2105-1119-5bd7-a680-670d4d1d64ca", "target_ref": "attack-pattern--58002197-8183-530c-9eea-d2d8532a9008" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--623d01d3-107e-5241-a29e-a7e2e1ea1216", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "tool--cd4a2105-1119-5bd7-a680-670d4d1d64ca", "target_ref": "attack-pattern--7ec6ff5b-83cd-5725-adda-2b5d3a846414" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2df9d80e-13bc-525e-b72b-e80c49a35e55", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "tool--cd4a2105-1119-5bd7-a680-670d4d1d64ca", "target_ref": "attack-pattern--12a37f6f-1b04-52d2-9ad3-56bca9ba3350" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--80480416-83cd-552f-bcb3-5ba5214dab80", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "tool--cd4a2105-1119-5bd7-a680-670d4d1d64ca", "target_ref": "attack-pattern--92ca3ca4-e512-53c5-be45-1f8b05cc913b" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9b398879-a71b-5cd1-ae38-89fd25139825", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "tool--cd4a2105-1119-5bd7-a680-670d4d1d64ca", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8a50a9b0-b528-5a65-a6ed-b2d55121cef4", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "tool--cd4a2105-1119-5bd7-a680-670d4d1d64ca", "target_ref": "attack-pattern--093e472c-281c-5e78-9228-486255d3058a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--da7af854-622e-53c7-a749-997caf30d23c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "tool--cd4a2105-1119-5bd7-a680-670d4d1d64ca", "target_ref": "attack-pattern--bf6ef44d-fa93-5733-862a-26c1ac15a4b4" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7d624df5-e705-593f-93d4-d71bb4373ce9", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "tool--cd4a2105-1119-5bd7-a680-670d4d1d64ca", "target_ref": "attack-pattern--1d0e4f47-8c77-58a2-b885-f44145ed3bf4" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--30d28ffc-d188-5118-a61c-fb6e1260fee4", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "intrusion-set--9f9bbd23-75c8-5685-9224-6d053ccba386", "target_ref": "tool--cd4a2105-1119-5bd7-a680-670d4d1d64ca" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--20003d9f-4e5f-5a39-a5d0-38eecbd5312a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "tool--5ad45975-dab7-53e9-8619-66c8eb0cfc63", "target_ref": "attack-pattern--58002197-8183-530c-9eea-d2d8532a9008" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--98e9b366-8574-546a-ac6d-74c580d9fdd4", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "tool--5ad45975-dab7-53e9-8619-66c8eb0cfc63", "target_ref": "attack-pattern--7ec6ff5b-83cd-5725-adda-2b5d3a846414" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0bb1937d-d49f-534e-8833-a0e0bb0c2725", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "tool--5ad45975-dab7-53e9-8619-66c8eb0cfc63", "target_ref": "attack-pattern--12a37f6f-1b04-52d2-9ad3-56bca9ba3350" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8a3537d9-688f-5bcd-99f9-0f2c15c34d3e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "tool--5ad45975-dab7-53e9-8619-66c8eb0cfc63", "target_ref": "attack-pattern--92ca3ca4-e512-53c5-be45-1f8b05cc913b" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--497054df-0c6c-5ae5-9c88-ce3c578ef7b3", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "tool--5ad45975-dab7-53e9-8619-66c8eb0cfc63", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a76efd30-2dbe-514c-b2a0-b851cfdd538f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "tool--5ad45975-dab7-53e9-8619-66c8eb0cfc63", "target_ref": "attack-pattern--093e472c-281c-5e78-9228-486255d3058a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7c877ad1-3152-5d2e-ae78-bad3b067e37b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "tool--5ad45975-dab7-53e9-8619-66c8eb0cfc63", "target_ref": "attack-pattern--bf6ef44d-fa93-5733-862a-26c1ac15a4b4" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--50f2aa25-78be-5ef5-88b8-56264b58ed46", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "tool--5ad45975-dab7-53e9-8619-66c8eb0cfc63", "target_ref": "attack-pattern--1d0e4f47-8c77-58a2-b885-f44145ed3bf4" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e7ce04cf-bb5f-56c8-8e77-c8ac0284304d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "intrusion-set--9f9bbd23-75c8-5685-9224-6d053ccba386", "target_ref": "tool--5ad45975-dab7-53e9-8619-66c8eb0cfc63" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--eadb7f0e-7d83-56b4-a2a1-4db200d08d6a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "tool--bfde2831-5467-5e6f-a6d1-e4122d97842f", "target_ref": "attack-pattern--58002197-8183-530c-9eea-d2d8532a9008" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4d105d45-f636-5e6f-a0cc-e7d29abdb18b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "tool--bfde2831-5467-5e6f-a6d1-e4122d97842f", "target_ref": "attack-pattern--7ec6ff5b-83cd-5725-adda-2b5d3a846414" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4d4df45c-cf4e-571f-bda2-a8f04251fb68", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "tool--bfde2831-5467-5e6f-a6d1-e4122d97842f", "target_ref": "attack-pattern--12a37f6f-1b04-52d2-9ad3-56bca9ba3350" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--23abea63-80d1-546a-9579-f4351faf5f38", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "tool--bfde2831-5467-5e6f-a6d1-e4122d97842f", "target_ref": "attack-pattern--92ca3ca4-e512-53c5-be45-1f8b05cc913b" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e411be07-cbb5-5f77-963d-69f5153ccb26", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "tool--bfde2831-5467-5e6f-a6d1-e4122d97842f", "target_ref": "attack-pattern--75d94806-bc98-57dc-894c-8ba499eb5540" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ee13b6c0-eaec-5d32-80a9-aee4ffa0c954", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "tool--bfde2831-5467-5e6f-a6d1-e4122d97842f", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b93a3763-4c3d-5c11-8a3a-20b3b69a1663", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "tool--bfde2831-5467-5e6f-a6d1-e4122d97842f", "target_ref": "attack-pattern--093e472c-281c-5e78-9228-486255d3058a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2652dca0-da69-5917-91e9-3df463b79740", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "tool--bfde2831-5467-5e6f-a6d1-e4122d97842f", "target_ref": "attack-pattern--bf6ef44d-fa93-5733-862a-26c1ac15a4b4" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--dd594aca-ab26-59b5-9fa9-432178093c8e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "intrusion-set--9f9bbd23-75c8-5685-9224-6d053ccba386", "target_ref": "tool--bfde2831-5467-5e6f-a6d1-e4122d97842f" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--59acca65-0f8f-5c43-930a-6cfde4656fdc", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "tool--176e9349-f531-5570-93a1-c4a8a41d3fa2", "target_ref": "attack-pattern--58002197-8183-530c-9eea-d2d8532a9008" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--427ccf10-7788-5fc6-9bff-ae721879499e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "tool--176e9349-f531-5570-93a1-c4a8a41d3fa2", "target_ref": "attack-pattern--12a37f6f-1b04-52d2-9ad3-56bca9ba3350" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--460a5f83-72bb-5517-9b21-23fbe7382fad", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "tool--176e9349-f531-5570-93a1-c4a8a41d3fa2", "target_ref": "attack-pattern--92ca3ca4-e512-53c5-be45-1f8b05cc913b" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--69734402-7d9c-57e2-ae16-3d7ef70c1ae4", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "tool--176e9349-f531-5570-93a1-c4a8a41d3fa2", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--40457b0d-8c51-585b-bf59-3f0f07ecfac9", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "tool--176e9349-f531-5570-93a1-c4a8a41d3fa2", "target_ref": "attack-pattern--bf6ef44d-fa93-5733-862a-26c1ac15a4b4" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3c96e4f4-b70a-5e3c-bd4f-4fc16f049af5", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "intrusion-set--9f9bbd23-75c8-5685-9224-6d053ccba386", "target_ref": "tool--176e9349-f531-5570-93a1-c4a8a41d3fa2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d5cfef12-ecbd-5eb7-a3bc-bbb4e5a974ec", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "tool--f0ed502b-402f-582b-a752-d72b34f83045", "target_ref": "attack-pattern--58002197-8183-530c-9eea-d2d8532a9008" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e8cb351e-d552-5f23-a256-90b54936f317", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "tool--f0ed502b-402f-582b-a752-d72b34f83045", "target_ref": "attack-pattern--12a37f6f-1b04-52d2-9ad3-56bca9ba3350" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0644a18b-1c62-5e22-ad6d-b367ef11f982", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "tool--f0ed502b-402f-582b-a752-d72b34f83045", "target_ref": "attack-pattern--92ca3ca4-e512-53c5-be45-1f8b05cc913b" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1e84ee7e-ad83-54a6-8f5f-36ad65925083", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "tool--f0ed502b-402f-582b-a752-d72b34f83045", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a7d68d12-2cdb-5767-98a2-e00d978997bc", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "tool--f0ed502b-402f-582b-a752-d72b34f83045", "target_ref": "attack-pattern--093e472c-281c-5e78-9228-486255d3058a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d0239f7d-db33-5f05-8244-0d8f25f11dd1", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "tool--f0ed502b-402f-582b-a752-d72b34f83045", "target_ref": "attack-pattern--bf6ef44d-fa93-5733-862a-26c1ac15a4b4" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8263b713-fced-5203-bf43-f7ec3215955e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "intrusion-set--9f9bbd23-75c8-5685-9224-6d053ccba386", "target_ref": "tool--f0ed502b-402f-582b-a752-d72b34f83045" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ecb3f1da-78c8-5f39-94fb-fff3f89bada3", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "tool--f62e5cdf-a9b6-5937-8013-f22b7360d132", "target_ref": "attack-pattern--58002197-8183-530c-9eea-d2d8532a9008" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--18dc9d62-006c-57fa-8f06-1555ef9ef000", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "tool--f62e5cdf-a9b6-5937-8013-f22b7360d132", "target_ref": "attack-pattern--12a37f6f-1b04-52d2-9ad3-56bca9ba3350" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e0130982-e9fc-54d7-85d9-05a9f26d5fba", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "tool--f62e5cdf-a9b6-5937-8013-f22b7360d132", "target_ref": "attack-pattern--92ca3ca4-e512-53c5-be45-1f8b05cc913b" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6adc56b0-e6e0-532f-9a20-317cbf1289c2", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "tool--f62e5cdf-a9b6-5937-8013-f22b7360d132", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f44b4863-8ccd-5f97-a638-a2316961055f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "tool--f62e5cdf-a9b6-5937-8013-f22b7360d132", "target_ref": "attack-pattern--093e472c-281c-5e78-9228-486255d3058a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--bb903f8d-71f5-5933-a444-6f5ba162f7b5", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "tool--f62e5cdf-a9b6-5937-8013-f22b7360d132", "target_ref": "attack-pattern--bf6ef44d-fa93-5733-862a-26c1ac15a4b4" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d7a898c0-aa51-534a-9e99-82348288e081", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "tool--f62e5cdf-a9b6-5937-8013-f22b7360d132", "target_ref": "attack-pattern--1d0e4f47-8c77-58a2-b885-f44145ed3bf4" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a0918a85-a0cf-514c-91a2-5e3c109665af", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "intrusion-set--9f9bbd23-75c8-5685-9224-6d053ccba386", "target_ref": "tool--f62e5cdf-a9b6-5937-8013-f22b7360d132" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--14279772-eecb-5fa4-a6b3-83f0c2580c33", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "tool--e62b06af-edeb-58b0-9b4b-90c1c8e7f228", "target_ref": "attack-pattern--58002197-8183-530c-9eea-d2d8532a9008" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--42af72d1-53c5-5baa-a76b-4a50b4baf16a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "tool--e62b06af-edeb-58b0-9b4b-90c1c8e7f228", "target_ref": "attack-pattern--12a37f6f-1b04-52d2-9ad3-56bca9ba3350" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--97ed87aa-a47b-5d28-85bc-7097f5909e45", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "tool--e62b06af-edeb-58b0-9b4b-90c1c8e7f228", "target_ref": "attack-pattern--92ca3ca4-e512-53c5-be45-1f8b05cc913b" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--11424074-9d3f-51ee-a3c2-8f98498a7d7f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "tool--e62b06af-edeb-58b0-9b4b-90c1c8e7f228", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--950449c1-a415-5ff1-9ad4-b64b9479a9c2", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "tool--e62b06af-edeb-58b0-9b4b-90c1c8e7f228", "target_ref": "attack-pattern--093e472c-281c-5e78-9228-486255d3058a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--24984443-a568-5120-82ec-95644ad5fd09", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "tool--e62b06af-edeb-58b0-9b4b-90c1c8e7f228", "target_ref": "attack-pattern--bf6ef44d-fa93-5733-862a-26c1ac15a4b4" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--46bc374e-ad67-5460-b8ff-5b4eab18e94f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "intrusion-set--9f9bbd23-75c8-5685-9224-6d053ccba386", "target_ref": "tool--e62b06af-edeb-58b0-9b4b-90c1c8e7f228" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--40b54857-3d0a-57fe-adf5-4356246b080f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "malware--a55da009-7480-5a50-8a91-347e90ba7b22", "target_ref": "attack-pattern--2a21b0c6-c06c-5130-9114-0d760dcb5b2c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b6787b04-d05f-5b43-b534-7d5e55898c78", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "malware--a55da009-7480-5a50-8a91-347e90ba7b22", "target_ref": "attack-pattern--9552d7a9-3083-569f-a641-d880fc8a27d5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9161fe24-97c3-56fe-9014-556e7c50aaf4", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "intrusion-set--59707bbb-48c5-5afb-8aaf-6233fb654e93", "target_ref": "malware--a55da009-7480-5a50-8a91-347e90ba7b22" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b6f8f007-f0e0-5e6f-911f-39d2934417ab", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "malware--ca7b9c46-bcf0-5e1a-9c03-2021303539c3", "target_ref": "attack-pattern--9552d7a9-3083-569f-a641-d880fc8a27d5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--37bf9efa-7062-5503-af7f-c820c197ba49", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "malware--ca7b9c46-bcf0-5e1a-9c03-2021303539c3", "target_ref": "attack-pattern--2a21b0c6-c06c-5130-9114-0d760dcb5b2c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d1a062d6-6ad4-55ad-9ebc-286b8a649c12", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "intrusion-set--59707bbb-48c5-5afb-8aaf-6233fb654e93", "target_ref": "malware--ca7b9c46-bcf0-5e1a-9c03-2021303539c3" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1cf00d8a-fe04-5ea9-a8b9-34935fbbb831", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "malware--c9e659a2-639a-5077-8263-533686709bf6", "target_ref": "attack-pattern--2a21b0c6-c06c-5130-9114-0d760dcb5b2c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d3cba919-1578-50c5-9699-bf4a41e159a7", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "malware--c9e659a2-639a-5077-8263-533686709bf6", "target_ref": "attack-pattern--cf39fa63-9044-5279-8ea5-4acb64d53904" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--31b9cb80-aeb6-5e45-893f-fcf3073db951", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "intrusion-set--59707bbb-48c5-5afb-8aaf-6233fb654e93", "target_ref": "malware--c9e659a2-639a-5077-8263-533686709bf6" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3ee40fdc-baf3-5a63-b779-168692c0cc16", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "malware--5d7a6f91-5b20-5011-9891-34fd5cdaca79", "target_ref": "attack-pattern--2a21b0c6-c06c-5130-9114-0d760dcb5b2c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a6a8827b-944d-5aad-8276-86e5c3cc677a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "intrusion-set--59707bbb-48c5-5afb-8aaf-6233fb654e93", "target_ref": "malware--5d7a6f91-5b20-5011-9891-34fd5cdaca79" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--92c75e4d-c8a0-589a-b1c8-2b55f11bc463", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "malware--b9301c01-f47a-515e-a5d7-238549fc8f43", "target_ref": "attack-pattern--bf6ef44d-fa93-5733-862a-26c1ac15a4b4" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b85e0f98-3471-5743-ab4e-886c9225a081", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "intrusion-set--533fc757-0230-574b-99b5-4e0d54367824", "target_ref": "malware--b9301c01-f47a-515e-a5d7-238549fc8f43" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e57cf7a4-e583-5a52-9c11-b4cf4043b741", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "malware--d31a01a0-a0eb-5609-a13c-4c16a6996946", "target_ref": "attack-pattern--9552d7a9-3083-569f-a641-d880fc8a27d5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2f3de90c-cfb0-507e-bc6d-786a52f711d4", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "malware--d31a01a0-a0eb-5609-a13c-4c16a6996946", "target_ref": "attack-pattern--12a37f6f-1b04-52d2-9ad3-56bca9ba3350" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0e426144-5fd2-5f11-8cbb-18098cd33341", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "malware--d31a01a0-a0eb-5609-a13c-4c16a6996946", "target_ref": "attack-pattern--92ca3ca4-e512-53c5-be45-1f8b05cc913b" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--34eb7f98-198a-5bc0-a005-996df9c8b65c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "malware--9255da7a-0f5e-5915-bc28-6465bc7db74d", "target_ref": "attack-pattern--9552d7a9-3083-569f-a641-d880fc8a27d5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6a08379f-94a3-5bee-8b92-a5f3c59ddded", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "malware--9255da7a-0f5e-5915-bc28-6465bc7db74d", "target_ref": "attack-pattern--12a37f6f-1b04-52d2-9ad3-56bca9ba3350" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d90c6c94-b3f4-5582-9f6c-71f069a3f4e5", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "malware--9255da7a-0f5e-5915-bc28-6465bc7db74d", "target_ref": "attack-pattern--92ca3ca4-e512-53c5-be45-1f8b05cc913b" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--78f0a594-771f-51f1-8265-2cac165bb19a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "malware--a55bbadd-c3e6-52ca-9aee-b91532c61a9a", "target_ref": "attack-pattern--9552d7a9-3083-569f-a641-d880fc8a27d5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--090e5309-fd84-5df5-be44-e0b105fa03d7", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "malware--a55bbadd-c3e6-52ca-9aee-b91532c61a9a", "target_ref": "attack-pattern--12a37f6f-1b04-52d2-9ad3-56bca9ba3350" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--dd275538-1a43-517f-9f49-b67fe26aab31", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "malware--a55bbadd-c3e6-52ca-9aee-b91532c61a9a", "target_ref": "attack-pattern--92ca3ca4-e512-53c5-be45-1f8b05cc913b" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--bcd67e39-8044-544c-b21f-56b5dbc5fbdf", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "tool--7ff1da9c-a18d-5686-889d-9b654b898cbb", "target_ref": "attack-pattern--052caee2-c494-51c7-87d3-0b5ae531eeb2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2120fcdb-6b51-5829-9cbf-50acd4a4deb1", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "tool--88f19f07-d87d-5350-ae41-ce479cbfc7ee", "target_ref": "attack-pattern--51de129b-35c6-52ab-baa1-4952b944dad8" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3e427450-446f-55b4-8eef-7c0718755906", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "tool--ded60c66-92eb-5c74-a21c-326e63e6cff0", "target_ref": "attack-pattern--b027592f-baee-5d2a-9d15-925aa1b77941" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0abd9e16-f262-5e4c-b934-fff185722ed1", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "tool--ded60c66-92eb-5c74-a21c-326e63e6cff0", "target_ref": "attack-pattern--a55b5859-fa73-5cab-a342-82b97187ea20" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--10636af1-446e-55e5-99b3-c7c648122688", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "tool--ded60c66-92eb-5c74-a21c-326e63e6cff0", "target_ref": "attack-pattern--e12a0e1d-8dac-5395-b37b-b0aa20814db2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c9f544cd-b33b-56a6-b21c-23c124e83aee", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "malware--19d87156-8f94-5a72-b336-889f9d28e34e", "target_ref": "attack-pattern--2a21b0c6-c06c-5130-9114-0d760dcb5b2c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b9f01678-14df-52fd-9a5a-5445591c6099", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "malware--19d87156-8f94-5a72-b336-889f9d28e34e", "target_ref": "attack-pattern--9552d7a9-3083-569f-a641-d880fc8a27d5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4abfb9f4-503d-5ba1-9d17-a4901e7e86d6", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "intrusion-set--59707bbb-48c5-5afb-8aaf-6233fb654e93", "target_ref": "malware--19d87156-8f94-5a72-b336-889f9d28e34e" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--855e2203-f01c-5f20-b4d3-d6e70a1029c1", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "malware--a8c40011-d841-509c-b02b-424191105390", "target_ref": "attack-pattern--2a21b0c6-c06c-5130-9114-0d760dcb5b2c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--51f76767-094a-5932-855c-dd48511e7e80", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "malware--a8c40011-d841-509c-b02b-424191105390", "target_ref": "attack-pattern--9552d7a9-3083-569f-a641-d880fc8a27d5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--afbd4fd8-c47f-509e-9afa-35c5dd7a187c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "intrusion-set--3adb2eec-bad1-5bb3-ba32-1d86e8069b69", "target_ref": "malware--a8c40011-d841-509c-b02b-424191105390" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--18d278df-2c8a-531b-b6f0-a49baeedd9d7", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "intrusion-set--59707bbb-48c5-5afb-8aaf-6233fb654e93", "target_ref": "malware--a8c40011-d841-509c-b02b-424191105390" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8ac720d3-c26e-5d3e-bf67-df84e3d71d07", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "malware--b7215b7c-47a0-5f14-aaff-f22040ea76fb", "target_ref": "attack-pattern--2a21b0c6-c06c-5130-9114-0d760dcb5b2c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--663120ab-eaac-5cf0-9806-b847b0a002a4", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "malware--b7215b7c-47a0-5f14-aaff-f22040ea76fb", "target_ref": "attack-pattern--9552d7a9-3083-569f-a641-d880fc8a27d5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2b090e88-c2e8-5226-a2e9-5a09f03b1d0b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "intrusion-set--59707bbb-48c5-5afb-8aaf-6233fb654e93", "target_ref": "malware--b7215b7c-47a0-5f14-aaff-f22040ea76fb" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6e7832c6-ad84-52db-b289-d5edf327a4f6", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "intrusion-set--3adb2eec-bad1-5bb3-ba32-1d86e8069b69", "target_ref": "malware--b7215b7c-47a0-5f14-aaff-f22040ea76fb" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--91dc5dc5-b85c-5831-bed4-8b522c0530ac", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "malware--71df2d91-411a-5d72-a9fb-c8715c02aa17", "target_ref": "attack-pattern--2a21b0c6-c06c-5130-9114-0d760dcb5b2c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--84c3d492-5b2a-5841-b42e-4259942698d3", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "malware--71df2d91-411a-5d72-a9fb-c8715c02aa17", "target_ref": "attack-pattern--9552d7a9-3083-569f-a641-d880fc8a27d5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--396e3144-5b5b-5f2d-b48c-0535ea9ef6b7", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "intrusion-set--59707bbb-48c5-5afb-8aaf-6233fb654e93", "target_ref": "malware--71df2d91-411a-5d72-a9fb-c8715c02aa17" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8d3d7899-3665-5821-bbfe-e7dda5105a99", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "intrusion-set--3adb2eec-bad1-5bb3-ba32-1d86e8069b69", "target_ref": "malware--71df2d91-411a-5d72-a9fb-c8715c02aa17" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3c775270-e75c-50f0-97a5-d8ad04baddd1", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "malware--13bed137-d65c-53c2-bf4f-048aadb26ca6", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a6ebee4e-8c29-51a5-a220-979f6514298e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "malware--13bed137-d65c-53c2-bf4f-048aadb26ca6", "target_ref": "attack-pattern--e69d7f82-fe18-5677-abba-9dd6347bc5a2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f5d2f00c-cd27-5bfb-80b3-09af3228c18c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "malware--13bed137-d65c-53c2-bf4f-048aadb26ca6", "target_ref": "attack-pattern--093e472c-281c-5e78-9228-486255d3058a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c6305f5f-3b67-52ca-a7e7-765c9b47638e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "intrusion-set--50ffc35a-f390-56a1-b93c-4af2c94e2889", "target_ref": "malware--13bed137-d65c-53c2-bf4f-048aadb26ca6" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3955a58b-1118-565c-b535-7ce938d639b3", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "intrusion-set--25519556-9d97-5dbe-9bd2-3ed7e815c7c6", "target_ref": "malware--13bed137-d65c-53c2-bf4f-048aadb26ca6" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3b0d530a-d351-51c0-b624-566dd4178f24", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "malware--66d281d4-5e2f-5707-afe5-568e6b167a82", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8ab6fc6b-53de-5f7b-bd99-8ba7f8d91460", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "malware--66d281d4-5e2f-5707-afe5-568e6b167a82", "target_ref": "attack-pattern--e69d7f82-fe18-5677-abba-9dd6347bc5a2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--fbf1b60d-1aff-59c3-b186-7073c7d71392", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "malware--66d281d4-5e2f-5707-afe5-568e6b167a82", "target_ref": "attack-pattern--093e472c-281c-5e78-9228-486255d3058a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c79474e0-66f7-54e1-9112-8675031e6749", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "intrusion-set--02bfdd95-e888-5f32-95d8-90fbda1f2e39", "target_ref": "malware--66d281d4-5e2f-5707-afe5-568e6b167a82" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5fca0645-4954-5264-994b-ca473caa3447", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "malware--b99afedd-61bf-5be2-a839-e93147ea2e38", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0a28a642-5551-5a10-899e-d6e478f06eef", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "malware--b99afedd-61bf-5be2-a839-e93147ea2e38", "target_ref": "attack-pattern--e69d7f82-fe18-5677-abba-9dd6347bc5a2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--22b84df0-7e7d-5742-9fa6-c3efef2180fb", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "malware--b99afedd-61bf-5be2-a839-e93147ea2e38", "target_ref": "attack-pattern--1d0e4f47-8c77-58a2-b885-f44145ed3bf4" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7d00ed30-7433-5188-b925-6a5e2077c6dd", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "intrusion-set--0184acd8-671f-54aa-8ae7-7c61c7bf4dc8", "target_ref": "malware--b99afedd-61bf-5be2-a839-e93147ea2e38" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--cdc5cb4a-139a-5d29-a70f-5a4092e22cc9", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "intrusion-set--59707bbb-48c5-5afb-8aaf-6233fb654e93", "target_ref": "malware--b99afedd-61bf-5be2-a839-e93147ea2e38" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ae389596-e63d-57ce-b464-8b6692ef7e7b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "malware--2e94d85c-173f-5591-a8bf-deacf922e499", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--bfff7fe2-f22b-5988-b542-eca824942011", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "malware--2e94d85c-173f-5591-a8bf-deacf922e499", "target_ref": "attack-pattern--e69d7f82-fe18-5677-abba-9dd6347bc5a2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1d4da5a7-a55f-5979-9c45-9d6b1761d2ac", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "malware--2e94d85c-173f-5591-a8bf-deacf922e499", "target_ref": "attack-pattern--bf6ef44d-fa93-5733-862a-26c1ac15a4b4" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5ae15e19-dfe3-5494-a930-2e20caad854b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "intrusion-set--25519556-9d97-5dbe-9bd2-3ed7e815c7c6", "target_ref": "malware--2e94d85c-173f-5591-a8bf-deacf922e499" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--fd850248-a842-5393-8758-82916ca79685", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "intrusion-set--50ffc35a-f390-56a1-b93c-4af2c94e2889", "target_ref": "malware--2e94d85c-173f-5591-a8bf-deacf922e499" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--62eb61f3-8f35-5062-8fc0-a0bed3aa27c5", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "malware--01cc12b6-a3e9-50b2-984d-7cb990052ace", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--caf1b032-5e54-5b61-a6e9-593d894cf3a1", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "malware--01cc12b6-a3e9-50b2-984d-7cb990052ace", "target_ref": "attack-pattern--e69d7f82-fe18-5677-abba-9dd6347bc5a2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--19f9a90b-06a6-52af-ad76-50c9d6d51208", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "malware--01cc12b6-a3e9-50b2-984d-7cb990052ace", "target_ref": "attack-pattern--bf6ef44d-fa93-5733-862a-26c1ac15a4b4" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--167fd7f6-e2d0-589d-b0c9-c558b4161837", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "intrusion-set--5a3de7b5-cc0c-5c84-a4bd-b5a7b8252e40", "target_ref": "malware--01cc12b6-a3e9-50b2-984d-7cb990052ace" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--434b36d5-7e1f-5eed-ab43-8ca2a92b0ae1", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "malware--6f6ba66d-784c-5c94-a458-e7d8e6c7fa2a", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--830f9a16-ead7-52b9-ab00-c45b837cebfe", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "malware--6f6ba66d-784c-5c94-a458-e7d8e6c7fa2a", "target_ref": "attack-pattern--e69d7f82-fe18-5677-abba-9dd6347bc5a2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b8aab5ac-9f4a-5510-9fed-1c97da40c25f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "malware--6f6ba66d-784c-5c94-a458-e7d8e6c7fa2a", "target_ref": "attack-pattern--bf6ef44d-fa93-5733-862a-26c1ac15a4b4" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--068b3cbc-fe51-5041-b877-ad58d4fbae0f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "malware--936e8372-3daa-54da-a89a-4f68f1b71a1f", "target_ref": "attack-pattern--2a21b0c6-c06c-5130-9114-0d760dcb5b2c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--53462639-2614-589a-99ed-cb6d87dcc46d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "malware--936e8372-3daa-54da-a89a-4f68f1b71a1f", "target_ref": "attack-pattern--9552d7a9-3083-569f-a641-d880fc8a27d5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d8126f6c-2e2f-5a46-bf15-3ad5aa0b1ccb", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "intrusion-set--59707bbb-48c5-5afb-8aaf-6233fb654e93", "target_ref": "malware--936e8372-3daa-54da-a89a-4f68f1b71a1f" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--25b0957a-1e86-5215-ae05-a7e27079ca8a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "intrusion-set--3adb2eec-bad1-5bb3-ba32-1d86e8069b69", "target_ref": "malware--936e8372-3daa-54da-a89a-4f68f1b71a1f" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--fe745842-7805-5596-96f8-eee619cf4009", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "malware--60e49e2e-1db3-599d-a4e8-1c4d9e72107b", "target_ref": "attack-pattern--2a21b0c6-c06c-5130-9114-0d760dcb5b2c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c3ff6413-2804-5f79-95dd-c788d50e349d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "malware--60e49e2e-1db3-599d-a4e8-1c4d9e72107b", "target_ref": "attack-pattern--9552d7a9-3083-569f-a641-d880fc8a27d5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3c853891-d440-5fd5-a6ac-001d98fc2ce2", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "intrusion-set--59707bbb-48c5-5afb-8aaf-6233fb654e93", "target_ref": "malware--60e49e2e-1db3-599d-a4e8-1c4d9e72107b" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c67e18bf-9a3d-5013-8147-3c4e169e32be", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "intrusion-set--3adb2eec-bad1-5bb3-ba32-1d86e8069b69", "target_ref": "malware--60e49e2e-1db3-599d-a4e8-1c4d9e72107b" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5281bb41-b69f-517c-b47f-84adbe1a934b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "malware--e92e8137-b390-5c7a-b1a5-f2491b4059c4", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1244a2a1-f01f-5377-af40-7f28e46c505a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "malware--e92e8137-b390-5c7a-b1a5-f2491b4059c4", "target_ref": "attack-pattern--e69d7f82-fe18-5677-abba-9dd6347bc5a2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--116b95e9-a995-5190-aa1e-829c5a043c03", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "malware--e92e8137-b390-5c7a-b1a5-f2491b4059c4", "target_ref": "attack-pattern--1d0e4f47-8c77-58a2-b885-f44145ed3bf4" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ee4729bf-dfaf-55b3-870b-a960b859e5d2", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "intrusion-set--0184acd8-671f-54aa-8ae7-7c61c7bf4dc8", "target_ref": "malware--e92e8137-b390-5c7a-b1a5-f2491b4059c4" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1a44234e-9b33-52a0-8e14-74dd803e7c33", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "malware--51690d05-7fe1-5041-9cd4-4ddc600d0ff1", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f46d4272-fcb6-5f55-9a32-54c9bfd48d39", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "malware--51690d05-7fe1-5041-9cd4-4ddc600d0ff1", "target_ref": "attack-pattern--e69d7f82-fe18-5677-abba-9dd6347bc5a2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--40c6233f-4542-5d5f-a6d4-e4b55c689c9d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "malware--51690d05-7fe1-5041-9cd4-4ddc600d0ff1", "target_ref": "attack-pattern--1d0e4f47-8c77-58a2-b885-f44145ed3bf4" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b404b914-41d9-51b1-9760-f5eab803914d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "intrusion-set--533fc757-0230-574b-99b5-4e0d54367824", "target_ref": "malware--51690d05-7fe1-5041-9cd4-4ddc600d0ff1" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b092064d-b4b4-548f-8e02-facb4c9b045b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "malware--90dd3e78-eaae-59ab-ad4f-2ab48eb520a0", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--569d1809-e859-5630-b043-87b8d647e893", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "malware--90dd3e78-eaae-59ab-ad4f-2ab48eb520a0", "target_ref": "attack-pattern--e69d7f82-fe18-5677-abba-9dd6347bc5a2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f721ee74-27a2-5eba-b0d2-b4ee70359d3c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "malware--90dd3e78-eaae-59ab-ad4f-2ab48eb520a0", "target_ref": "attack-pattern--bf6ef44d-fa93-5733-862a-26c1ac15a4b4" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b9bd9856-9b8f-5ba4-95f1-590520f315e0", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "intrusion-set--c49d1031-95b3-573d-8daa-a2bf2cd66c77", "target_ref": "malware--90dd3e78-eaae-59ab-ad4f-2ab48eb520a0" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c6c1bdf5-25e7-5fe2-b401-b6a41b30a2ff", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "malware--583c2311-1a94-56ff-ac8f-67ac88d6cbcc", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--832a7813-ac9c-5b4b-bd89-86a0dcbbd2be", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "malware--583c2311-1a94-56ff-ac8f-67ac88d6cbcc", "target_ref": "attack-pattern--e69d7f82-fe18-5677-abba-9dd6347bc5a2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4ddc2d00-9cc1-5c8f-839d-9b70b53ca0d3", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "malware--583c2311-1a94-56ff-ac8f-67ac88d6cbcc", "target_ref": "attack-pattern--093e472c-281c-5e78-9228-486255d3058a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--836712d2-890a-500d-8c6f-96533794a49b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "malware--583c2311-1a94-56ff-ac8f-67ac88d6cbcc", "target_ref": "attack-pattern--bf6ef44d-fa93-5733-862a-26c1ac15a4b4" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--395c5622-5f4f-5514-b404-96364e0cc07d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "intrusion-set--1b552102-9688-5fb5-adc0-ea710eb9e8ea", "target_ref": "malware--583c2311-1a94-56ff-ac8f-67ac88d6cbcc" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--dd669c79-fc1a-5d1f-8730-a9e5ba835167", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "malware--1a29e7c0-ecea-5f4c-bd2f-28956dda3417", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--44e40e5c-7771-5880-a54e-1014690e4c2a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "malware--1a29e7c0-ecea-5f4c-bd2f-28956dda3417", "target_ref": "attack-pattern--e69d7f82-fe18-5677-abba-9dd6347bc5a2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3c9f36c4-26c6-585b-bf57-abdbbd18ca10", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "malware--1a29e7c0-ecea-5f4c-bd2f-28956dda3417", "target_ref": "attack-pattern--bf6ef44d-fa93-5733-862a-26c1ac15a4b4" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--bf581447-28c4-5c24-8c10-4244fba642e1", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "intrusion-set--6635387a-3ff2-5c07-8112-fbc9a4254690", "target_ref": "malware--1a29e7c0-ecea-5f4c-bd2f-28956dda3417" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--44cb674c-82e4-5143-b77f-b4b722fcd6c9", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "tool--f16b05e5-f10e-5b54-88bb-65e6f08b5cd2", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3d0f75c7-2793-5038-8822-439733f4faca", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "tool--f16b05e5-f10e-5b54-88bb-65e6f08b5cd2", "target_ref": "attack-pattern--e69d7f82-fe18-5677-abba-9dd6347bc5a2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--86e73817-5977-553f-9a32-f1a4afcbac12", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "tool--f16b05e5-f10e-5b54-88bb-65e6f08b5cd2", "target_ref": "attack-pattern--bf6ef44d-fa93-5733-862a-26c1ac15a4b4" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6e498e8c-c07f-5920-a7c9-1a8442d31d06", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "tool--f16b05e5-f10e-5b54-88bb-65e6f08b5cd2", "target_ref": "attack-pattern--1d0e4f47-8c77-58a2-b885-f44145ed3bf4" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--dee53393-c678-5a68-8b8a-177eabdb3020", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "intrusion-set--fc2d4c9b-40e7-5631-affb-97bf77e6d21d", "target_ref": "tool--f16b05e5-f10e-5b54-88bb-65e6f08b5cd2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5843ba71-103c-5b77-bec8-4114c2ccb37a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "tool--a2e9134d-5c15-5c22-b6f2-44bfba03b872", "target_ref": "attack-pattern--2a21b0c6-c06c-5130-9114-0d760dcb5b2c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e9380926-b271-5552-aacd-75cfede70492", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "tool--a2e9134d-5c15-5c22-b6f2-44bfba03b872", "target_ref": "attack-pattern--bf6ef44d-fa93-5733-862a-26c1ac15a4b4" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--abc9f003-038e-5573-a100-e2547fc26746", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "intrusion-set--50ffc35a-f390-56a1-b93c-4af2c94e2889", "target_ref": "tool--a2e9134d-5c15-5c22-b6f2-44bfba03b872" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--96143191-b080-516b-914d-d5e2285b7175", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "intrusion-set--0184acd8-671f-54aa-8ae7-7c61c7bf4dc8", "target_ref": "tool--a2e9134d-5c15-5c22-b6f2-44bfba03b872" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--285f5348-9497-5c12-b6ce-cacc3ea2483e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "intrusion-set--02bfdd95-e888-5f32-95d8-90fbda1f2e39", "target_ref": "tool--a2e9134d-5c15-5c22-b6f2-44bfba03b872" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--68482a96-9f15-55a8-8a66-83c2fb3afd38", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "intrusion-set--5a3de7b5-cc0c-5c84-a4bd-b5a7b8252e40", "target_ref": "tool--a2e9134d-5c15-5c22-b6f2-44bfba03b872" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2bffaac0-0f01-5949-88f9-665690ecf1f1", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "intrusion-set--804c8d72-b1bf-566a-9563-9fa07aae1c53", "target_ref": "tool--a2e9134d-5c15-5c22-b6f2-44bfba03b872" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--186e593d-9a1c-5a4f-8f13-1f67eb164a78", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "intrusion-set--1b552102-9688-5fb5-adc0-ea710eb9e8ea", "target_ref": "tool--a2e9134d-5c15-5c22-b6f2-44bfba03b872" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ebeb9412-e27a-5a02-861c-845f35d94c40", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "intrusion-set--c49d1031-95b3-573d-8daa-a2bf2cd66c77", "target_ref": "tool--a2e9134d-5c15-5c22-b6f2-44bfba03b872" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--aa537466-52f9-531c-83d7-93ff51916f28", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "intrusion-set--6635387a-3ff2-5c07-8112-fbc9a4254690", "target_ref": "tool--a2e9134d-5c15-5c22-b6f2-44bfba03b872" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--bc321c9f-be38-570a-8a6a-f576e6364c39", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "intrusion-set--fc2d4c9b-40e7-5631-affb-97bf77e6d21d", "target_ref": "tool--a2e9134d-5c15-5c22-b6f2-44bfba03b872" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3ee968f5-860c-598b-b064-59adb4b9359c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "intrusion-set--25519556-9d97-5dbe-9bd2-3ed7e815c7c6", "target_ref": "tool--a2e9134d-5c15-5c22-b6f2-44bfba03b872" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--cbd56587-a339-5c25-b812-99e2d4ef3658", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "malware--ebc08a60-abd0-5dea-a30c-27f7ec340051", "target_ref": "attack-pattern--2a21b0c6-c06c-5130-9114-0d760dcb5b2c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5cf35251-e7fe-5d6c-9f27-c1507d005350", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "malware--ebc08a60-abd0-5dea-a30c-27f7ec340051", "target_ref": "attack-pattern--9552d7a9-3083-569f-a641-d880fc8a27d5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c69b3868-52df-5370-96e8-3564c61f36ff", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "malware--ebc08a60-abd0-5dea-a30c-27f7ec340051", "target_ref": "attack-pattern--bf6ef44d-fa93-5733-862a-26c1ac15a4b4" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7959aad2-c421-5ef9-b3df-431b700385ed", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "intrusion-set--50ffc35a-f390-56a1-b93c-4af2c94e2889", "target_ref": "malware--ebc08a60-abd0-5dea-a30c-27f7ec340051" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c3fa1a58-cc75-5d96-86ff-72404f157e1f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "intrusion-set--02bfdd95-e888-5f32-95d8-90fbda1f2e39", "target_ref": "malware--ebc08a60-abd0-5dea-a30c-27f7ec340051" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--78b87af5-c13d-5577-8e2e-4cbdbb604412", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "intrusion-set--5a3de7b5-cc0c-5c84-a4bd-b5a7b8252e40", "target_ref": "malware--ebc08a60-abd0-5dea-a30c-27f7ec340051" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1b7c84b9-bd8e-5ed4-8ef3-53be8caab8c4", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "intrusion-set--804c8d72-b1bf-566a-9563-9fa07aae1c53", "target_ref": "malware--ebc08a60-abd0-5dea-a30c-27f7ec340051" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--42f75d8c-b8f9-5bc5-ae89-4c9a0bc18256", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "intrusion-set--c49d1031-95b3-573d-8daa-a2bf2cd66c77", "target_ref": "malware--ebc08a60-abd0-5dea-a30c-27f7ec340051" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a19f1358-9b86-5714-bbe1-5f3b75da4f95", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "intrusion-set--6635387a-3ff2-5c07-8112-fbc9a4254690", "target_ref": "malware--ebc08a60-abd0-5dea-a30c-27f7ec340051" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7b9dec16-456c-5ad7-a08a-2cacd56dde36", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "intrusion-set--fc2d4c9b-40e7-5631-affb-97bf77e6d21d", "target_ref": "malware--ebc08a60-abd0-5dea-a30c-27f7ec340051" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9a662b5f-bff8-5f72-8c77-296679e41174", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "malware--107e102f-d531-58ef-9f01-aa602de42211", "target_ref": "attack-pattern--2a21b0c6-c06c-5130-9114-0d760dcb5b2c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--59df1b92-43da-53ad-8f37-b6a6105521c9", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "malware--107e102f-d531-58ef-9f01-aa602de42211", "target_ref": "attack-pattern--9552d7a9-3083-569f-a641-d880fc8a27d5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--aecc5b3b-ad83-5007-a876-0ca0642ede20", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "malware--107e102f-d531-58ef-9f01-aa602de42211", "target_ref": "attack-pattern--bf6ef44d-fa93-5733-862a-26c1ac15a4b4" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--75c254fe-594d-5d66-8b12-8d70679ff3fb", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "intrusion-set--50ffc35a-f390-56a1-b93c-4af2c94e2889", "target_ref": "malware--107e102f-d531-58ef-9f01-aa602de42211" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a0365595-4aec-5f8f-a349-1caf493bcafe", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "intrusion-set--02bfdd95-e888-5f32-95d8-90fbda1f2e39", "target_ref": "malware--107e102f-d531-58ef-9f01-aa602de42211" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4f1d8901-f8ef-5464-9755-37131e8d9814", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "intrusion-set--5a3de7b5-cc0c-5c84-a4bd-b5a7b8252e40", "target_ref": "malware--107e102f-d531-58ef-9f01-aa602de42211" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--cd7dfb10-6a87-57cf-8947-289603e4813a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "intrusion-set--c49d1031-95b3-573d-8daa-a2bf2cd66c77", "target_ref": "malware--107e102f-d531-58ef-9f01-aa602de42211" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e5ee0caa-900b-5980-a246-b2633b6fd388", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "malware--ceea4ce9-71aa-52df-899b-27715d98c7d9", "target_ref": "attack-pattern--2a21b0c6-c06c-5130-9114-0d760dcb5b2c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0f7638b9-1e61-5356-bf42-29b94b025dc6", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "malware--ceea4ce9-71aa-52df-899b-27715d98c7d9", "target_ref": "attack-pattern--9552d7a9-3083-569f-a641-d880fc8a27d5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c3cef476-baa7-5e11-a1fc-25f2176097b9", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "malware--ceea4ce9-71aa-52df-899b-27715d98c7d9", "target_ref": "attack-pattern--bf6ef44d-fa93-5733-862a-26c1ac15a4b4" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1cf9793c-4bb1-5730-a9a8-2e989c671cc8", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "intrusion-set--50ffc35a-f390-56a1-b93c-4af2c94e2889", "target_ref": "malware--ceea4ce9-71aa-52df-899b-27715d98c7d9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ae25bf55-aa9f-555c-96de-67522aa25f9a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "intrusion-set--02bfdd95-e888-5f32-95d8-90fbda1f2e39", "target_ref": "malware--ceea4ce9-71aa-52df-899b-27715d98c7d9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--88da1997-b9bc-54d9-b5dc-d61205dc82fa", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "intrusion-set--5a3de7b5-cc0c-5c84-a4bd-b5a7b8252e40", "target_ref": "malware--ceea4ce9-71aa-52df-899b-27715d98c7d9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f5795cc8-986a-51d6-ac9d-8d323b710eba", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "intrusion-set--804c8d72-b1bf-566a-9563-9fa07aae1c53", "target_ref": "malware--ceea4ce9-71aa-52df-899b-27715d98c7d9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4e43c255-61d9-5027-8e27-becabbda7ee4", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "malware--c469fc57-9c29-59ba-bcd1-d832071309c6", "target_ref": "attack-pattern--7861ffbc-2d68-5482-ba5f-32e5a630a7a6" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a1580dcf-3b90-5202-bec8-3b555303a007", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "malware--c469fc57-9c29-59ba-bcd1-d832071309c6", "target_ref": "attack-pattern--77b517cc-4b13-5a1b-8262-fb171254ddb5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1be1e9ed-ebae-55af-9675-e6a96070091c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "malware--c469fc57-9c29-59ba-bcd1-d832071309c6", "target_ref": "attack-pattern--2a21b0c6-c06c-5130-9114-0d760dcb5b2c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--db88cf52-94f0-528c-a849-afb097c5f073", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "uses", "source_ref": "intrusion-set--59707bbb-48c5-5afb-8aaf-6233fb654e93", "target_ref": "malware--c469fc57-9c29-59ba-bcd1-d832071309c6" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--013896e2-b62e-5804-8500-cdf15bd10a12", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--bb084d4d-e596-5a86-84e6-1b5aff792c47", "target_ref": "attack-pattern--5d6fd913-d256-5849-b154-bff6af32ce81" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ce2b42b6-eb6f-586d-b2af-6f29e0588f8b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--c6c15f07-b971-5fe8-b1cc-e6b8a4497e2a", "target_ref": "x-oak-tactic--8bad0643-6df7-5354-80c9-005cb836b58c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9b26406a-dcb0-5002-9a7c-f1c738ff415e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--c6c15f07-b971-5fe8-b1cc-e6b8a4497e2a", "target_ref": "attack-pattern--980e72bb-7127-51de-9870-d8a88edc74f8" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1445e159-11ab-5ee2-acff-cae09e8789d7", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--a4daaf07-44b5-5260-9306-9ec171779fe6", "target_ref": "attack-pattern--3419f870-c58f-5b87-b67d-829b01e4d724" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4fa10532-031e-58a8-b014-c21329f29756", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--b340fb99-4cec-551b-92d5-e481a7266620", "target_ref": "attack-pattern--f43b3cdc-ed19-5ad0-b661-706c665d9f83" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--073b7e99-fec5-5b02-b64c-b60bd34782d3", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--b340fb99-4cec-551b-92d5-e481a7266620", "target_ref": "attack-pattern--77b517cc-4b13-5a1b-8262-fb171254ddb5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3f27d781-da18-5acf-80a5-c1e10ae840e1", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--b340fb99-4cec-551b-92d5-e481a7266620", "target_ref": "attack-pattern--78f0aa7b-06b4-5266-b348-58db62932a71" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--eecb049a-a161-5f67-9065-c58c7a41b69f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--b9ed6274-9ae7-5a5a-a1ce-2fd53a20b9af", "target_ref": "attack-pattern--77b517cc-4b13-5a1b-8262-fb171254ddb5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e0c13c05-7b2e-52dc-9056-dd8b50cbc7be", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--b9ed6274-9ae7-5a5a-a1ce-2fd53a20b9af", "target_ref": "attack-pattern--78f0aa7b-06b4-5266-b348-58db62932a71" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c9778c00-e01c-52f9-ba8d-66f69275afd7", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--91e0e735-8524-5aa5-8c05-dd4a5660863e", "target_ref": "attack-pattern--aebe2a72-a361-5ab4-8465-3a32a4dbd638" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d51e7aaf-4b61-5962-bc35-0f9096a01070", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--91e0e735-8524-5aa5-8c05-dd4a5660863e", "target_ref": "attack-pattern--cccae07c-951c-54bd-bfa4-af87de266370" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f54d0f4d-67a3-5c39-82f9-49cf1e68e6d2", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--d1e601e8-c39b-513a-9fee-ec650eb29c10", "target_ref": "attack-pattern--b027592f-baee-5d2a-9d15-925aa1b77941" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--cc593015-6d28-5bba-850e-b7712909b30d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--d1e601e8-c39b-513a-9fee-ec650eb29c10", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--08a1258b-b55b-5caf-b96c-2f8065bf68d3", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--b31f6c24-52a6-5c95-860b-51994c3b2ff6", "target_ref": "attack-pattern--e69d7f82-fe18-5677-abba-9dd6347bc5a2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3c902b2d-47fd-5d0e-9979-594c3c8568a4", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--b31f6c24-52a6-5c95-860b-51994c3b2ff6", "target_ref": "attack-pattern--3d929810-93ce-5bc0-bdcf-2128db844b95" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--85a9a97b-89c2-54d0-a297-77d8bd9f62ed", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--c8974fec-0f97-58a8-9f6c-19ab4a0481f5", "target_ref": "attack-pattern--cccae07c-951c-54bd-bfa4-af87de266370" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a4a44633-d539-5706-973f-9d3fbf4a0278", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--c8974fec-0f97-58a8-9f6c-19ab4a0481f5", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5698c82a-29d0-5f08-b9ea-d5b6056a92b7", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--c8974fec-0f97-58a8-9f6c-19ab4a0481f5", "target_ref": "attack-pattern--e69d7f82-fe18-5677-abba-9dd6347bc5a2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f38a9a03-b9ca-5c43-aa4b-47b60a523f82", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--c8974fec-0f97-58a8-9f6c-19ab4a0481f5", "target_ref": "attack-pattern--bf6ef44d-fa93-5733-862a-26c1ac15a4b4" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0becf26e-6216-5c58-91e9-3fe55ee6247a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--5938362b-9ba4-593c-bec4-49c3ea2b0828", "target_ref": "attack-pattern--2a21b0c6-c06c-5130-9114-0d760dcb5b2c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6db513f2-0355-509f-a47c-b101c643497e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--5938362b-9ba4-593c-bec4-49c3ea2b0828", "target_ref": "attack-pattern--77b517cc-4b13-5a1b-8262-fb171254ddb5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--389323fa-7a9d-5a23-bbec-9063512d00d5", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--0551ce64-ad0d-5c62-8fac-649ce9ab4f33", "target_ref": "attack-pattern--2a21b0c6-c06c-5130-9114-0d760dcb5b2c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--dc55a25d-7b9e-53fd-9fad-bd0388edfa78", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--0551ce64-ad0d-5c62-8fac-649ce9ab4f33", "target_ref": "attack-pattern--5deeb2fb-1df3-5566-8229-2e83bd241a08" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e4413663-bf96-5392-a509-c6132a6b25a2", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--0551ce64-ad0d-5c62-8fac-649ce9ab4f33", "target_ref": "attack-pattern--a508cca2-dfea-5831-9bd5-f7d69abe422b" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c14e67f0-60a5-520f-9dcc-b5008484cfa3", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--44b3403b-6897-5d17-8860-b02b8409b65a", "target_ref": "attack-pattern--2a21b0c6-c06c-5130-9114-0d760dcb5b2c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--df4a0358-7375-5e8c-b030-e31bf22ddc43", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--44b3403b-6897-5d17-8860-b02b8409b65a", "target_ref": "attack-pattern--77b517cc-4b13-5a1b-8262-fb171254ddb5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d5131131-3d35-5e77-afbd-951f0883987c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--3590e500-06bc-5d39-91b2-5596a634bcf8", "target_ref": "attack-pattern--aebe2a72-a361-5ab4-8465-3a32a4dbd638" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--daaea84f-8195-5b10-a3ed-f30acb1fc29a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--3590e500-06bc-5d39-91b2-5596a634bcf8", "target_ref": "attack-pattern--b027592f-baee-5d2a-9d15-925aa1b77941" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--bdc9d320-bed9-5ff3-a5d8-a36eee481dc0", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--3590e500-06bc-5d39-91b2-5596a634bcf8", "target_ref": "attack-pattern--cccae07c-951c-54bd-bfa4-af87de266370" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--401a067e-5191-5a44-ac2d-a7086982d638", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--b33fd0fd-47d3-5585-b421-3186fa21bfc9", "target_ref": "attack-pattern--f43b3cdc-ed19-5ad0-b661-706c665d9f83" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--344d3b74-7084-57af-aa07-43a1a766eb46", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--b33fd0fd-47d3-5585-b421-3186fa21bfc9", "target_ref": "attack-pattern--77b517cc-4b13-5a1b-8262-fb171254ddb5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b0971fb5-0477-5686-902a-0a78fc43284a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--b33fd0fd-47d3-5585-b421-3186fa21bfc9", "target_ref": "attack-pattern--a019d6df-047d-5759-8cee-e8de54595ade" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--989e08a4-9bd1-50ae-870d-6fa61ee112fa", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--5e01e539-c584-5190-b2e7-a6bec9dd3463", "target_ref": "attack-pattern--2a21b0c6-c06c-5130-9114-0d760dcb5b2c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--776f83aa-abf1-5e4c-8cfc-d1cdb54c297d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--5e01e539-c584-5190-b2e7-a6bec9dd3463", "target_ref": "attack-pattern--77b517cc-4b13-5a1b-8262-fb171254ddb5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--aea1d9ab-f855-55cf-8dc6-4768ebe0ae8e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--ab776a28-bbde-5c0f-997e-560dba4b35bd", "target_ref": "attack-pattern--aebe2a72-a361-5ab4-8465-3a32a4dbd638" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--11cefb67-c950-59d7-94b5-c887cc978e76", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--ab776a28-bbde-5c0f-997e-560dba4b35bd", "target_ref": "attack-pattern--cccae07c-951c-54bd-bfa4-af87de266370" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--51676925-13e9-5e06-a9bf-edfb42647edd", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--436d6014-6e24-5abd-960b-9018b49eade3", "target_ref": "attack-pattern--6d6dfb01-6c40-58c3-ac5a-98b6042866bd" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f01b8239-c883-5bcc-8333-e6774e9bf3f9", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--436d6014-6e24-5abd-960b-9018b49eade3", "target_ref": "attack-pattern--5deeb2fb-1df3-5566-8229-2e83bd241a08" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2a3086f8-6695-537c-960f-ae9de758b3a9", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--436d6014-6e24-5abd-960b-9018b49eade3", "target_ref": "attack-pattern--d9e4a005-06a9-5cee-9f7c-234e20790118" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5764e48f-a9fd-5c51-a014-6aa16a4cb965", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--436d6014-6e24-5abd-960b-9018b49eade3", "target_ref": "attack-pattern--a508cca2-dfea-5831-9bd5-f7d69abe422b" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0d591edd-c19e-53a4-9333-62947dddb47d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--9efc929a-8c2d-52c6-bd4a-c2a0d0c1c58c", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f43e267f-0770-53c1-a152-9f4008e1d60c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--9efc929a-8c2d-52c6-bd4a-c2a0d0c1c58c", "target_ref": "attack-pattern--7c80fbf5-2de5-5802-a501-b5e28b2e5b10" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--36643f92-a26c-56da-80a4-3324ac279e3b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--8925bbbe-294f-582f-bcc9-aa9c18b9f645", "target_ref": "attack-pattern--bf6ef44d-fa93-5733-862a-26c1ac15a4b4" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c92f94f0-b581-577b-831e-91e1582dc7a0", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--8925bbbe-294f-582f-bcc9-aa9c18b9f645", "target_ref": "attack-pattern--7c80fbf5-2de5-5802-a501-b5e28b2e5b10" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--dff1677d-a900-5363-9671-370c24269262", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--8925bbbe-294f-582f-bcc9-aa9c18b9f645", "target_ref": "attack-pattern--a508cca2-dfea-5831-9bd5-f7d69abe422b" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c6c74764-2320-54c8-87dd-d53b9265aaae", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--f3a0d545-9bda-54bd-bcb3-692784f94fb3", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3e63d8c8-4a53-5415-9752-26dd4c299d3a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--f3a0d545-9bda-54bd-bcb3-692784f94fb3", "target_ref": "attack-pattern--e69d7f82-fe18-5677-abba-9dd6347bc5a2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--22ae026d-54e4-50dd-bc95-dcb35ca71c1f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--f3a0d545-9bda-54bd-bcb3-692784f94fb3", "target_ref": "attack-pattern--07314232-9e18-5d07-b8a6-6ce0ffec7200" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c0987df8-e1eb-537a-bcab-c065a8957e42", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--f3a0d545-9bda-54bd-bcb3-692784f94fb3", "target_ref": "attack-pattern--bf6ef44d-fa93-5733-862a-26c1ac15a4b4" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--acd0ddea-a749-59ab-adf3-a177aa64ad31", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--edcc65e3-5134-5514-b912-3855b6e8b1e1", "target_ref": "attack-pattern--7c80fbf5-2de5-5802-a501-b5e28b2e5b10" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ad375171-ab68-57b2-82cb-c29423a20d5c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--edcc65e3-5134-5514-b912-3855b6e8b1e1", "target_ref": "attack-pattern--3d929810-93ce-5bc0-bdcf-2128db844b95" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6a0951a0-b038-5289-bae0-90d990573c9e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--d2542ecf-1b67-5388-aa40-b976f190993b", "target_ref": "attack-pattern--7c80fbf5-2de5-5802-a501-b5e28b2e5b10" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4ed562a7-3503-5b45-a1e4-296be6436214", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--37350f07-373a-58c3-905b-d7ca5e8bd42a", "target_ref": "attack-pattern--a508cca2-dfea-5831-9bd5-f7d69abe422b" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6aa5cc8a-e180-5aed-8eff-da7e5e8beef0", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--36cbe421-a5d1-5b59-99b1-fd7ff29ff70d", "target_ref": "attack-pattern--f43b3cdc-ed19-5ad0-b661-706c665d9f83" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5ee0899a-c9a1-527e-876a-f2957d5b9e84", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--36cbe421-a5d1-5b59-99b1-fd7ff29ff70d", "target_ref": "attack-pattern--093e472c-281c-5e78-9228-486255d3058a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--50b17c27-3428-5ded-949f-563a113ce30f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--b42d6b4b-ebcf-5c4a-8111-5106c87a0cf2", "target_ref": "x-oak-tactic--a05710d6-773d-5671-81e6-1a9d53ce156a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3615341d-2e78-5b28-8d02-ba8fcaf4a3f4", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--b42d6b4b-ebcf-5c4a-8111-5106c87a0cf2", "target_ref": "attack-pattern--2a21b0c6-c06c-5130-9114-0d760dcb5b2c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9ddd53b3-c7a2-5acb-b818-1bdf2dde8874", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--b42d6b4b-ebcf-5c4a-8111-5106c87a0cf2", "target_ref": "attack-pattern--9552d7a9-3083-569f-a641-d880fc8a27d5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--25e216ca-2936-551b-ad5b-fdd5c4dfaf3b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--b42d6b4b-ebcf-5c4a-8111-5106c87a0cf2", "target_ref": "attack-pattern--0de49898-b977-5cf7-9608-eff3285c50c7" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a12589fb-6d7e-58b9-a650-ea53a079b7e4", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--b42d6b4b-ebcf-5c4a-8111-5106c87a0cf2", "target_ref": "attack-pattern--e69d7f82-fe18-5677-abba-9dd6347bc5a2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--362bb737-f47b-569e-aaf0-1f718fa1ed26", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--b42d6b4b-ebcf-5c4a-8111-5106c87a0cf2", "target_ref": "attack-pattern--bf6ef44d-fa93-5733-862a-26c1ac15a4b4" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--763344ef-6402-53e6-b5dd-ce9bc1799195", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--8854936d-5bb9-5ba6-8ccd-3ef9aaf7abb5", "target_ref": "attack-pattern--2a21b0c6-c06c-5130-9114-0d760dcb5b2c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--08cc99b8-07e3-5231-bd3b-e4ec2593ed9b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--8854936d-5bb9-5ba6-8ccd-3ef9aaf7abb5", "target_ref": "attack-pattern--77b517cc-4b13-5a1b-8262-fb171254ddb5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f63ee67f-08f4-5cf5-bc8d-572413860812", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--8854936d-5bb9-5ba6-8ccd-3ef9aaf7abb5", "target_ref": "attack-pattern--a019d6df-047d-5759-8cee-e8de54595ade" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--65d7da61-4c67-5571-84e8-da814d3733a9", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--6c1d8b8f-e6c1-59d9-81dd-c745c79c7d21", "target_ref": "attack-pattern--2a21b0c6-c06c-5130-9114-0d760dcb5b2c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--976d15f5-eee4-5963-ba0d-64ea2a5844b1", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--6c1d8b8f-e6c1-59d9-81dd-c745c79c7d21", "target_ref": "attack-pattern--77b517cc-4b13-5a1b-8262-fb171254ddb5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a1ea687c-52ab-51d4-a075-b3521fc35909", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--2a97edab-0a2a-5fdb-a7d5-a2c7bdb3f905", "target_ref": "attack-pattern--2a21b0c6-c06c-5130-9114-0d760dcb5b2c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9504ef6d-4083-5bca-9c6c-1708abecab47", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--2a97edab-0a2a-5fdb-a7d5-a2c7bdb3f905", "target_ref": "attack-pattern--f43b3cdc-ed19-5ad0-b661-706c665d9f83" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c05cc1d1-2ce8-52ae-b462-dd090b74b573", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--f89474b5-405b-51d7-b1db-f553f278eef1", "target_ref": "attack-pattern--6d6dfb01-6c40-58c3-ac5a-98b6042866bd" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--869af060-fb1b-5c4f-87fc-1934fae4024e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--f89474b5-405b-51d7-b1db-f553f278eef1", "target_ref": "attack-pattern--cccae07c-951c-54bd-bfa4-af87de266370" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d0666079-423e-5339-9a15-60359267fe27", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--f89474b5-405b-51d7-b1db-f553f278eef1", "target_ref": "attack-pattern--d9e4a005-06a9-5cee-9f7c-234e20790118" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3c21f0dd-74fa-5755-8e74-335afaf54ee6", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--f89474b5-405b-51d7-b1db-f553f278eef1", "target_ref": "attack-pattern--a508cca2-dfea-5831-9bd5-f7d69abe422b" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6a96d10d-9b4b-5a6d-b315-48624db39a09", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--2bf8698b-fc7d-5c7f-b2b8-869f595f22ea", "target_ref": "attack-pattern--aebe2a72-a361-5ab4-8465-3a32a4dbd638" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--11884957-5328-56a5-b69d-ac18ac506085", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--2bf8698b-fc7d-5c7f-b2b8-869f595f22ea", "target_ref": "x-oak-tactic--5fc49855-8bca-5500-b810-322019badf15" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e7edd139-bfa3-5598-be1a-3396e252eb1d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--ae9845cb-3748-5c47-90b0-78c2e13c9b49", "target_ref": "attack-pattern--7c80fbf5-2de5-5802-a501-b5e28b2e5b10" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--cfcead47-ee2a-5e7a-a197-51635d93598d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--0b64e70c-d4e3-5870-8293-b4fd633aa7fb", "target_ref": "x-oak-tactic--a05710d6-773d-5671-81e6-1a9d53ce156a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1e59eacd-5c39-5e89-a195-9f33c3673a39", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--0b64e70c-d4e3-5870-8293-b4fd633aa7fb", "target_ref": "attack-pattern--9552d7a9-3083-569f-a641-d880fc8a27d5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8b1a9219-a25f-5cdd-bf70-42723f216ebd", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--0b64e70c-d4e3-5870-8293-b4fd633aa7fb", "target_ref": "attack-pattern--7861ffbc-2d68-5482-ba5f-32e5a630a7a6" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--93f88c3a-86db-5dcd-8ba3-c261f5789ac1", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--0b64e70c-d4e3-5870-8293-b4fd633aa7fb", "target_ref": "attack-pattern--77b517cc-4b13-5a1b-8262-fb171254ddb5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--dc55e804-67eb-5608-9d2f-afdc5be62c54", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--1823de00-3527-5b37-815f-63c8c2d39e5e", "target_ref": "attack-pattern--94a03321-bd42-5ba5-a14c-869236fb3822" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c6262600-2c53-509f-922d-5083f0c6a3db", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--1823de00-3527-5b37-815f-63c8c2d39e5e", "target_ref": "attack-pattern--a019d6df-047d-5759-8cee-e8de54595ade" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7a0e2f3b-9ab0-5d8c-80ef-aacba4b5ac50", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--1823de00-3527-5b37-815f-63c8c2d39e5e", "target_ref": "attack-pattern--e69d7f82-fe18-5677-abba-9dd6347bc5a2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--edb7ac78-f87f-5024-a38e-21adc689fa0b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--d010f828-c1df-57cb-8358-8bb2427dc23c", "target_ref": "x-oak-tactic--a05710d6-773d-5671-81e6-1a9d53ce156a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ca0673ae-b412-59eb-8e02-ed4476361acf", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--d010f828-c1df-57cb-8358-8bb2427dc23c", "target_ref": "attack-pattern--2a21b0c6-c06c-5130-9114-0d760dcb5b2c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--bc314da2-869d-516c-9efd-037f17040032", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--d010f828-c1df-57cb-8358-8bb2427dc23c", "target_ref": "attack-pattern--9552d7a9-3083-569f-a641-d880fc8a27d5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3fbc2169-0879-5d0b-98aa-a723cf6300ff", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--07f65111-1a73-57cd-b1d5-f7feaa24e7b8", "target_ref": "attack-pattern--cccae07c-951c-54bd-bfa4-af87de266370" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--cba54545-3354-52f2-976e-9fdc9e52bb0b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--07f65111-1a73-57cd-b1d5-f7feaa24e7b8", "target_ref": "attack-pattern--d9e4a005-06a9-5cee-9f7c-234e20790118" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--002391c5-fe98-5f1f-8802-1809ed5c03b4", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--07f65111-1a73-57cd-b1d5-f7feaa24e7b8", "target_ref": "attack-pattern--a508cca2-dfea-5831-9bd5-f7d69abe422b" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0e5f9798-edb3-5148-8330-e720e78b03c8", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--b257f6ae-1988-5850-a393-9332df592f88", "target_ref": "attack-pattern--2a21b0c6-c06c-5130-9114-0d760dcb5b2c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--672f4791-949b-581d-a6ca-260a2dc6103a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--b257f6ae-1988-5850-a393-9332df592f88", "target_ref": "attack-pattern--77b517cc-4b13-5a1b-8262-fb171254ddb5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--28491bec-649b-5fb9-bc45-d66b3c654373", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--aac75cbe-f43f-599d-8af7-80f366678070", "target_ref": "attack-pattern--2a21b0c6-c06c-5130-9114-0d760dcb5b2c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ca9379a1-137f-5ab1-af10-2aa2015dd013", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--aac75cbe-f43f-599d-8af7-80f366678070", "target_ref": "attack-pattern--f43b3cdc-ed19-5ad0-b661-706c665d9f83" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d5a0b87f-bed1-55ea-ace2-bfea763dc869", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--aac75cbe-f43f-599d-8af7-80f366678070", "target_ref": "attack-pattern--a019d6df-047d-5759-8cee-e8de54595ade" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ced9b00a-8c01-5e9d-adf7-3b96fa08fdb0", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--248a968b-da08-5213-aa77-eedd8537cdb1", "target_ref": "attack-pattern--2a21b0c6-c06c-5130-9114-0d760dcb5b2c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e74bcdd9-7e33-5be2-be8b-96c0cf7c999f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--248a968b-da08-5213-aa77-eedd8537cdb1", "target_ref": "attack-pattern--77b517cc-4b13-5a1b-8262-fb171254ddb5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--44f6f243-19d5-5880-87a3-faf8faaf457d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--b86a7f40-4b26-5a9d-b28a-bd6dddb3203c", "target_ref": "attack-pattern--fd40fed2-9093-5b5a-8ebd-5b288e3ae6c5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d68623a4-cb0c-5fd8-82ff-c34c89a58ca5", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--7810fb94-c05b-57a6-bab8-147f208075f6", "target_ref": "attack-pattern--2a21b0c6-c06c-5130-9114-0d760dcb5b2c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8e12b278-14e7-575b-8c9e-6e4d6dc8bd2d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--7810fb94-c05b-57a6-bab8-147f208075f6", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--eed272fe-d572-5a0d-8067-55a998567030", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--a96d3171-ac99-5614-afb2-287e52db2959", "target_ref": "attack-pattern--c5adc3a0-7ace-5a7f-b629-506415142209" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a447052f-7061-51db-a864-de2dc7b72cab", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--a96d3171-ac99-5614-afb2-287e52db2959", "target_ref": "attack-pattern--a019d6df-047d-5759-8cee-e8de54595ade" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7ad708b5-c435-5d6f-b08c-9a3ad4ea9f4b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--a96d3171-ac99-5614-afb2-287e52db2959", "target_ref": "attack-pattern--a508cca2-dfea-5831-9bd5-f7d69abe422b" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a8d92f0d-a82e-5701-ba26-ff9d530ab4c4", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--b87e3103-97d8-5989-ae26-76c81467a295", "target_ref": "attack-pattern--b8d62a9c-14cd-503a-af8d-a26b825dffcd" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--06273549-bc55-50e1-858d-ab3666e2bcb0", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--b87e3103-97d8-5989-ae26-76c81467a295", "target_ref": "x-oak-tactic--7fa7f00b-059a-5a92-b145-0893b4530bb6" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7d88ae44-147c-5570-a1ce-5ac05751ecdd", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--b87e3103-97d8-5989-ae26-76c81467a295", "target_ref": "attack-pattern--bf6ef44d-fa93-5733-862a-26c1ac15a4b4" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--86088ab2-278d-5b8e-a6ab-ec1211286ed4", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--ac9dc4b2-8d86-5a33-878a-4c55daf8e9c1", "target_ref": "attack-pattern--2a21b0c6-c06c-5130-9114-0d760dcb5b2c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6978f2eb-7e7a-5873-9eb5-ca35681732d6", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--ac9dc4b2-8d86-5a33-878a-4c55daf8e9c1", "target_ref": "attack-pattern--77b517cc-4b13-5a1b-8262-fb171254ddb5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--588064fa-30fa-5a1c-a5b0-159966071005", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--81390be8-81f6-5e04-b4f4-640accbaaadd", "target_ref": "attack-pattern--9552d7a9-3083-569f-a641-d880fc8a27d5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1d608a51-e80b-55a8-86ce-c8801fb1aaf6", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--81390be8-81f6-5e04-b4f4-640accbaaadd", "target_ref": "attack-pattern--77b517cc-4b13-5a1b-8262-fb171254ddb5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6b72b023-067f-5a50-a822-e219948e88c1", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--9166fecb-9063-5dfc-8565-342c06317dfd", "target_ref": "attack-pattern--2a21b0c6-c06c-5130-9114-0d760dcb5b2c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1d42442d-0444-5c0f-b8fe-be17943b0562", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--9166fecb-9063-5dfc-8565-342c06317dfd", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8130aba4-cc33-5372-bae4-eec6b2d7db06", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--f34489e0-6576-52e9-b22c-8944a1629f46", "target_ref": "attack-pattern--9b65ffc8-0be6-5809-b228-a85033f790ba" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--affdbb33-fc28-56c4-b4ea-2d73bbf72779", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--51e30262-65c5-5d56-b716-b25abc76cd32", "target_ref": "attack-pattern--91a0a76b-eaf0-5e8a-b6b9-7f62268ce853" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5a76d373-6526-50db-97f0-fe2a07038dde", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--51e30262-65c5-5d56-b716-b25abc76cd32", "target_ref": "attack-pattern--2a21b0c6-c06c-5130-9114-0d760dcb5b2c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--aae05ac0-5e38-535f-89db-db3073532abf", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--51e30262-65c5-5d56-b716-b25abc76cd32", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c8ee230d-b60f-54d2-b7a0-0bb93e9446be", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--51e30262-65c5-5d56-b716-b25abc76cd32", "target_ref": "attack-pattern--fccf2600-ec82-53d1-b3ba-0384a28f8be3" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5c3176fc-fd48-5ece-8833-d12d60491b1a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--3b4a1767-e43b-571e-977e-3586edd2f19a", "target_ref": "attack-pattern--9552d7a9-3083-569f-a641-d880fc8a27d5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--38cec120-a423-5490-85dd-89fb79cbc6e2", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--3b4a1767-e43b-571e-977e-3586edd2f19a", "target_ref": "attack-pattern--7861ffbc-2d68-5482-ba5f-32e5a630a7a6" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--914d0960-3055-526a-876a-d46f5a18f2d6", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--3b4a1767-e43b-571e-977e-3586edd2f19a", "target_ref": "attack-pattern--77b517cc-4b13-5a1b-8262-fb171254ddb5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e0c95b79-0ae9-5ef8-badc-ab9342f33915", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--3b4a1767-e43b-571e-977e-3586edd2f19a", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2e7ed5ac-9d28-508f-ac38-e167303d8f10", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--3b4a1767-e43b-571e-977e-3586edd2f19a", "target_ref": "attack-pattern--bf6ef44d-fa93-5733-862a-26c1ac15a4b4" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d02e7b4d-3b50-5153-9457-2ff5e2f327e4", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--ed4da23b-455d-52ea-8f72-1e0f6d880319", "target_ref": "attack-pattern--88316cc3-a9f9-5dc9-96e0-0f8889ca0234" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--265b9f08-5dd7-541e-a0d0-910ca95049bb", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--ed4da23b-455d-52ea-8f72-1e0f6d880319", "target_ref": "attack-pattern--1d0e4f47-8c77-58a2-b885-f44145ed3bf4" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f4ebc940-5aba-5993-b586-56a7379c5dd1", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--5839b0c0-eee5-5eec-b05f-f82086bdd0d1", "target_ref": "attack-pattern--e69d7f82-fe18-5677-abba-9dd6347bc5a2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--71b3ed32-7d15-59cb-9145-7758d636628a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--5839b0c0-eee5-5eec-b05f-f82086bdd0d1", "target_ref": "attack-pattern--bf6ef44d-fa93-5733-862a-26c1ac15a4b4" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a469c6fb-46e3-5c83-b795-cd9df6643933", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--5839b0c0-eee5-5eec-b05f-f82086bdd0d1", "target_ref": "attack-pattern--3d929810-93ce-5bc0-bdcf-2128db844b95" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--eade48b2-4c7f-5564-a972-63d362e719c6", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--5839b0c0-eee5-5eec-b05f-f82086bdd0d1", "target_ref": "attack-pattern--a508cca2-dfea-5831-9bd5-f7d69abe422b" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d0d9cd54-77aa-5f83-b68e-50ac02973d04", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--d1caa7b3-a4e5-5803-a222-d14d1f741aa0", "target_ref": "attack-pattern--040f06e8-1825-51bd-8145-52c5b97b26d5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--518b6a37-609f-5648-8d1a-dfd48fbebc85", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--d1caa7b3-a4e5-5803-a222-d14d1f741aa0", "target_ref": "attack-pattern--88316cc3-a9f9-5dc9-96e0-0f8889ca0234" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a6b8e165-8f26-5d0f-8ccd-efdb2a4d0fea", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--d1caa7b3-a4e5-5803-a222-d14d1f741aa0", "target_ref": "attack-pattern--fef61756-5074-52ac-8731-3cd76a564130" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1b297a76-2b4b-5f77-9e95-a6c60e288358", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--77352fbb-7ef9-5ba6-975d-ea9170e1e721", "target_ref": "attack-pattern--f43b3cdc-ed19-5ad0-b661-706c665d9f83" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4e1bfb8c-842a-59b7-beb6-a4ca1b44dd7d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--77352fbb-7ef9-5ba6-975d-ea9170e1e721", "target_ref": "attack-pattern--b8d62a9c-14cd-503a-af8d-a26b825dffcd" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--219ab4e2-7732-5c62-9c05-28da1a5a931a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--b332be92-a9ea-51d4-bd10-af626a206bf4", "target_ref": "attack-pattern--7861ffbc-2d68-5482-ba5f-32e5a630a7a6" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c4498aee-b8ee-50b0-9dbb-dcf5587788d5", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--b332be92-a9ea-51d4-bd10-af626a206bf4", "target_ref": "attack-pattern--77b517cc-4b13-5a1b-8262-fb171254ddb5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--92ca341a-ad5b-578d-8467-92bb0a32723e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--b13fd061-547c-5b7a-9771-e468b0559935", "target_ref": "x-oak-tactic--a05710d6-773d-5671-81e6-1a9d53ce156a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--49ad4129-5926-572b-a45f-a4a147174297", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--b13fd061-547c-5b7a-9771-e468b0559935", "target_ref": "attack-pattern--647504b6-bc6d-5c30-b18d-82c99e51b62d" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--60b6098b-574a-55c7-851d-df1fa8e22030", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--daeee87a-dae4-527c-a825-f899bb522a87", "target_ref": "attack-pattern--77b517cc-4b13-5a1b-8262-fb171254ddb5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f5940310-a89d-51ea-8fb2-c439d0b958e1", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--daeee87a-dae4-527c-a825-f899bb522a87", "target_ref": "attack-pattern--419b5ccf-6a56-5639-a130-82e3f14a544e" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--aa761e66-7ad5-52ab-9e86-427e22814f49", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--75668c80-867b-5962-ab68-1dc279fa8ee2", "target_ref": "attack-pattern--2a21b0c6-c06c-5130-9114-0d760dcb5b2c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--cab91d0f-79b0-5cda-ba55-f971ee3adacc", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--75668c80-867b-5962-ab68-1dc279fa8ee2", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6557f50c-9bd3-50e0-b09f-3111d66642c9", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--d76bd295-1f1b-5d4c-96d0-0118bb44b90f", "target_ref": "x-oak-tactic--a05710d6-773d-5671-81e6-1a9d53ce156a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a0d53720-c0f3-580a-823c-6c675092af61", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--d76bd295-1f1b-5d4c-96d0-0118bb44b90f", "target_ref": "attack-pattern--9552d7a9-3083-569f-a641-d880fc8a27d5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8bbdbead-86a0-565f-bf51-982d75be27ed", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--d76bd295-1f1b-5d4c-96d0-0118bb44b90f", "target_ref": "attack-pattern--7861ffbc-2d68-5482-ba5f-32e5a630a7a6" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--fde50403-ec9d-5960-aca6-abb1f84363e7", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--d76bd295-1f1b-5d4c-96d0-0118bb44b90f", "target_ref": "attack-pattern--77b517cc-4b13-5a1b-8262-fb171254ddb5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ef4b60bf-062b-51e2-bcbd-d5bba0053863", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--1bd13c7b-e367-534f-8f30-7c97ed9dc88a", "target_ref": "attack-pattern--e45221c4-74e9-52ab-8e20-96d05003d65a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--fdb7eb37-f972-562e-84dc-ea5d389ab7d6", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--1bd13c7b-e367-534f-8f30-7c97ed9dc88a", "target_ref": "x-oak-tactic--a05710d6-773d-5671-81e6-1a9d53ce156a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f0cdd2f7-8fd9-5a80-9514-6427ac339c60", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--1bd13c7b-e367-534f-8f30-7c97ed9dc88a", "target_ref": "attack-pattern--58002197-8183-530c-9eea-d2d8532a9008" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2ec6a047-926f-5341-84c4-c4011f812bc0", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--1bd13c7b-e367-534f-8f30-7c97ed9dc88a", "target_ref": "attack-pattern--9b65ffc8-0be6-5809-b228-a85033f790ba" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--07ba165e-ae6f-5e58-b390-09513bf9797d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--406f8123-0df1-5247-873f-ce7f0f6f31cd", "target_ref": "attack-pattern--2a21b0c6-c06c-5130-9114-0d760dcb5b2c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f1f475c6-ce76-5b94-9638-1569eb35dedb", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--406f8123-0df1-5247-873f-ce7f0f6f31cd", "target_ref": "attack-pattern--77b517cc-4b13-5a1b-8262-fb171254ddb5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5cdf243d-4e71-50a0-99d9-67205285c76b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--bee0be06-3f60-51ba-a0f7-db093eecf6f3", "target_ref": "attack-pattern--7861ffbc-2d68-5482-ba5f-32e5a630a7a6" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--66b6b966-fe8d-5378-afc9-d199bf1be2da", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--bee0be06-3f60-51ba-a0f7-db093eecf6f3", "target_ref": "attack-pattern--58002197-8183-530c-9eea-d2d8532a9008" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4642d47f-ec63-5b39-a826-cf45b4d3ff91", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--bee0be06-3f60-51ba-a0f7-db093eecf6f3", "target_ref": "attack-pattern--bf6ef44d-fa93-5733-862a-26c1ac15a4b4" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ff5b0af8-3474-5010-b494-753a821da441", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--02efd257-9e16-5569-997a-7f7c6e4fdd52", "target_ref": "attack-pattern--2a21b0c6-c06c-5130-9114-0d760dcb5b2c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d4b190a0-a0da-5382-b030-df3c335a50ce", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--02efd257-9e16-5569-997a-7f7c6e4fdd52", "target_ref": "attack-pattern--7861ffbc-2d68-5482-ba5f-32e5a630a7a6" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0d1f9341-0245-55f2-9be2-043cebb7ec65", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--02efd257-9e16-5569-997a-7f7c6e4fdd52", "target_ref": "attack-pattern--3d929810-93ce-5bc0-bdcf-2128db844b95" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--39984f14-6196-571e-9ae7-6eee6fb21386", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--6e8d1acc-504f-5e4a-96ab-45c6a7b4ed74", "target_ref": "attack-pattern--f474475e-47e9-57d5-b8d1-35077726b770" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--91d0d6f3-ab8f-57bc-acbf-6cf9e911ddce", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--6e8d1acc-504f-5e4a-96ab-45c6a7b4ed74", "target_ref": "attack-pattern--e69d7f82-fe18-5677-abba-9dd6347bc5a2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4bd16460-6c65-509b-a7dd-93d7a11d2cc7", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--6e8d1acc-504f-5e4a-96ab-45c6a7b4ed74", "target_ref": "attack-pattern--bf6ef44d-fa93-5733-862a-26c1ac15a4b4" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--858932b1-aea7-5124-b80c-47461b92ad0d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--876b884b-ed50-552d-876f-d865ec63e0ff", "target_ref": "attack-pattern--e69d7f82-fe18-5677-abba-9dd6347bc5a2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b93965fc-f8c7-5b13-b4c5-4672c2b16e8c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--876b884b-ed50-552d-876f-d865ec63e0ff", "target_ref": "attack-pattern--a508cca2-dfea-5831-9bd5-f7d69abe422b" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--af8af04f-8080-5101-ab74-961fcd435930", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--b127904c-d06e-54f1-a8a6-1de75d582c36", "target_ref": "x-oak-tactic--a05710d6-773d-5671-81e6-1a9d53ce156a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f851cc85-d9f1-5dbe-8fbe-5d6f9aefe6de", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--b127904c-d06e-54f1-a8a6-1de75d582c36", "target_ref": "attack-pattern--647504b6-bc6d-5c30-b18d-82c99e51b62d" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--31a5ef94-24f7-51dd-a721-5eb50ce344b3", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--437c3ca5-8524-5cb9-998c-45ec6710e8f3", "target_ref": "attack-pattern--2a21b0c6-c06c-5130-9114-0d760dcb5b2c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--faa3f8a5-84b6-5c13-9200-02546fb9ae31", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--437c3ca5-8524-5cb9-998c-45ec6710e8f3", "target_ref": "attack-pattern--aebe2a72-a361-5ab4-8465-3a32a4dbd638" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b2562b21-02b1-5d11-871d-ba2bc558c87a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--437c3ca5-8524-5cb9-998c-45ec6710e8f3", "target_ref": "attack-pattern--cccae07c-951c-54bd-bfa4-af87de266370" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f5877961-ad67-5f15-8565-3a440b1aaf73", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--cd5e2009-3543-546c-8beb-db4d8dc3d387", "target_ref": "x-oak-tactic--a05710d6-773d-5671-81e6-1a9d53ce156a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--31a5b046-fac4-54b9-b095-9476d163c95e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--cd5e2009-3543-546c-8beb-db4d8dc3d387", "target_ref": "attack-pattern--7861ffbc-2d68-5482-ba5f-32e5a630a7a6" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--98933056-cfc3-5791-b5aa-7270b26e8414", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--cd5e2009-3543-546c-8beb-db4d8dc3d387", "target_ref": "attack-pattern--77b517cc-4b13-5a1b-8262-fb171254ddb5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d72adc84-d149-54b6-be15-b63bfabe5855", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--4854c5cb-5a65-5a49-80e4-2a66c5ab854b", "target_ref": "attack-pattern--2a21b0c6-c06c-5130-9114-0d760dcb5b2c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3d99e209-fe27-5a12-b18b-1b89a98bfe09", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--4854c5cb-5a65-5a49-80e4-2a66c5ab854b", "target_ref": "attack-pattern--77b517cc-4b13-5a1b-8262-fb171254ddb5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0efe9ed8-7f4c-5676-b25e-25bf145aac96", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--4854c5cb-5a65-5a49-80e4-2a66c5ab854b", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7cb2a8fd-9c6d-5191-8459-ffd19a19b448", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--0ffd7fac-382a-5140-9708-4d1d928d5a4c", "target_ref": "attack-pattern--2a21b0c6-c06c-5130-9114-0d760dcb5b2c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a0254a7e-f962-5039-99b2-2027ceb34772", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--0ffd7fac-382a-5140-9708-4d1d928d5a4c", "target_ref": "attack-pattern--77b517cc-4b13-5a1b-8262-fb171254ddb5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f9c60ac4-2817-5484-8b80-52a74c406712", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--0ffd7fac-382a-5140-9708-4d1d928d5a4c", "target_ref": "attack-pattern--3d929810-93ce-5bc0-bdcf-2128db844b95" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--78466e01-f83d-57c5-a27d-a3a563480a2c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--8b64c7b0-18c1-5059-b378-1e049978d51c", "target_ref": "attack-pattern--aebe2a72-a361-5ab4-8465-3a32a4dbd638" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8e651b66-6d22-5bda-9bae-ca9decd4dd2d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--8b64c7b0-18c1-5059-b378-1e049978d51c", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5e7189e1-bb1b-57e4-86b4-1781b9e9b191", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--8b64c7b0-18c1-5059-b378-1e049978d51c", "target_ref": "attack-pattern--093e472c-281c-5e78-9228-486255d3058a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3b45a2ef-0eba-5127-ae62-2d31d15f077d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--e14ce737-60a2-58f2-91b9-b9aca3850eda", "target_ref": "attack-pattern--2a21b0c6-c06c-5130-9114-0d760dcb5b2c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--aafcbc9f-c025-505a-9ca2-9a44755d820c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--e14ce737-60a2-58f2-91b9-b9aca3850eda", "target_ref": "attack-pattern--bf6ef44d-fa93-5733-862a-26c1ac15a4b4" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--767451ae-1759-5187-9d7c-61f3e4288ce3", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--195d716d-7c52-55aa-bf2f-109a8e26815e", "target_ref": "attack-pattern--88316cc3-a9f9-5dc9-96e0-0f8889ca0234" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b944ceea-9030-5c2b-9a09-d1f4f7549cf7", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--195d716d-7c52-55aa-bf2f-109a8e26815e", "target_ref": "attack-pattern--fef61756-5074-52ac-8731-3cd76a564130" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--63665f1f-5766-5554-ba03-44ac2f10a1c1", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--6c06afe7-9a91-5d39-8435-db135d4713d6", "target_ref": "attack-pattern--2a21b0c6-c06c-5130-9114-0d760dcb5b2c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a8584ea6-c924-563f-90c5-649df53e4b2d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--6c06afe7-9a91-5d39-8435-db135d4713d6", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ca90a52c-c0d4-5d4e-85c4-eaa6018bb35a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--91488b6d-a910-5f49-a860-3fcdc9419190", "target_ref": "attack-pattern--888de015-81a7-52ec-9832-87baca164029" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--89b94582-afc4-5aab-8981-9b1f7164a71e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--91488b6d-a910-5f49-a860-3fcdc9419190", "target_ref": "attack-pattern--473b0aa4-1cea-57d5-a0a1-9114ebeb1de6" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--04a5ee27-111c-5171-93a1-9f6978e4a904", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--91488b6d-a910-5f49-a860-3fcdc9419190", "target_ref": "attack-pattern--3419f870-c58f-5b87-b67d-829b01e4d724" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2be40540-2bc4-554e-945e-81716f757bc9", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--91488b6d-a910-5f49-a860-3fcdc9419190", "target_ref": "attack-pattern--5a491154-55c8-5abc-8449-0d48df41514b" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3a1d30a0-02ed-542f-927e-4585bb8dfb33", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--4de66e3a-6bb2-5a46-8a7c-f8eab9b7ed4f", "target_ref": "attack-pattern--040f06e8-1825-51bd-8145-52c5b97b26d5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--96a33e9c-9500-50aa-9549-ed407f091d8f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--4de66e3a-6bb2-5a46-8a7c-f8eab9b7ed4f", "target_ref": "attack-pattern--fef61756-5074-52ac-8731-3cd76a564130" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--fc4660d0-4000-509e-819c-408cba6f610d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--4455d0a4-505b-528a-b1e8-2f4c81fa1db3", "target_ref": "attack-pattern--473b0aa4-1cea-57d5-a0a1-9114ebeb1de6" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--814260af-1809-501c-baf9-fc71234e09b1", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--4455d0a4-505b-528a-b1e8-2f4c81fa1db3", "target_ref": "attack-pattern--f5bce1e3-3637-56df-8db9-94e793306171" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--de9eb102-38f1-5927-a280-052847fcdbc5", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--4455d0a4-505b-528a-b1e8-2f4c81fa1db3", "target_ref": "attack-pattern--f81933a4-bfe2-528f-94ef-399577e5a682" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--dfc41224-7911-5fa9-9f40-a73f0f2edf3f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--2288fe6a-c85b-534e-87c7-27a34668ec66", "target_ref": "attack-pattern--fe838439-8aa4-5b23-9494-fde9e1d5637c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3689e566-f1a1-568a-a6fc-cd01e2000a3e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--c0268879-d2e8-550c-a92c-de71b4795273", "target_ref": "attack-pattern--f80bec40-b7fa-52eb-a6a4-d4acd59dce38" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f0b24511-fc36-5de6-a9e4-5b5bc9e55b3f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--c0268879-d2e8-550c-a92c-de71b4795273", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--31db4864-9171-5fc4-9893-96a37f538866", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--c0268879-d2e8-550c-a92c-de71b4795273", "target_ref": "attack-pattern--f81933a4-bfe2-528f-94ef-399577e5a682" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--43108a15-bd54-528c-a5a2-6a45e6fc7b04", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--c0268879-d2e8-550c-a92c-de71b4795273", "target_ref": "attack-pattern--fd40fed2-9093-5b5a-8ebd-5b288e3ae6c5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f3079936-7c43-5b96-83a2-871bb878c84c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--46194957-6e12-5bc3-be76-74b83e229914", "target_ref": "attack-pattern--13ac496a-4463-5007-af2b-d6cc9503a3ac" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1551562a-22f5-5996-9c0d-f7d528767c9b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--46194957-6e12-5bc3-be76-74b83e229914", "target_ref": "attack-pattern--9b65ffc8-0be6-5809-b228-a85033f790ba" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--45106047-81c1-5769-a5f6-f60391a1b74c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--417ecdad-6e8a-5344-9be5-1f7108bce5b7", "target_ref": "attack-pattern--f474475e-47e9-57d5-b8d1-35077726b770" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b7695b94-1f2f-596a-96a0-3c1b0bdbceed", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--417ecdad-6e8a-5344-9be5-1f7108bce5b7", "target_ref": "attack-pattern--e69d7f82-fe18-5677-abba-9dd6347bc5a2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--400d2756-4663-5ce3-b003-59674c271cfa", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--8bc36d96-8f14-5b0a-bb33-b418f9864913", "target_ref": "attack-pattern--78f0aa7b-06b4-5266-b348-58db62932a71" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6cbcb0bc-5f3a-5eb5-b1ec-2c89df84762c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--8bc36d96-8f14-5b0a-bb33-b418f9864913", "target_ref": "attack-pattern--58002197-8183-530c-9eea-d2d8532a9008" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7ffa2d31-9cf2-5543-adc5-e0a858143128", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--8bc36d96-8f14-5b0a-bb33-b418f9864913", "target_ref": "attack-pattern--7ec6ff5b-83cd-5725-adda-2b5d3a846414" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--11346893-750a-5d32-bb60-332521b6787f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--e8e4f9e9-8a2e-5768-aea9-e77600d4fee8", "target_ref": "attack-pattern--7861ffbc-2d68-5482-ba5f-32e5a630a7a6" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c3b754d6-23ba-551f-a3d9-897d530505da", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--e8e4f9e9-8a2e-5768-aea9-e77600d4fee8", "target_ref": "attack-pattern--79d99263-2431-5abd-bf5f-2869979031be" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c9067cc4-841e-59e3-91fd-67a7a9d60810", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--e8e4f9e9-8a2e-5768-aea9-e77600d4fee8", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e93ad9ea-3369-589c-9721-cb35058f981a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--e8e4f9e9-8a2e-5768-aea9-e77600d4fee8", "target_ref": "attack-pattern--bf6ef44d-fa93-5733-862a-26c1ac15a4b4" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c3da9a55-a21f-561f-a9f4-4bba7106eafa", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--326f10ab-6d4e-5c63-81f7-afa83c1a973f", "target_ref": "attack-pattern--b19923a2-b45b-5106-935d-f52d0d875a94" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--778bfa3a-e250-5067-88a4-9fb3493b9f29", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--326f10ab-6d4e-5c63-81f7-afa83c1a973f", "target_ref": "attack-pattern--b027592f-baee-5d2a-9d15-925aa1b77941" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3b641053-8004-5d2c-8ef9-80023a7c6c4a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--326f10ab-6d4e-5c63-81f7-afa83c1a973f", "target_ref": "attack-pattern--f5bce1e3-3637-56df-8db9-94e793306171" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3c52347f-9eac-5fa4-91bd-bc3acfb7b29c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--3361cafe-8290-5339-9e1a-979760aa5466", "target_ref": "attack-pattern--473b0aa4-1cea-57d5-a0a1-9114ebeb1de6" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ba8221ec-d8e1-5e3d-83b5-8e293d865239", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--3361cafe-8290-5339-9e1a-979760aa5466", "target_ref": "attack-pattern--647504b6-bc6d-5c30-b18d-82c99e51b62d" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--353798a8-a014-5a9c-9492-21cb094aea3c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--3361cafe-8290-5339-9e1a-979760aa5466", "target_ref": "attack-pattern--f5bce1e3-3637-56df-8db9-94e793306171" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f86cd767-4a93-53f1-9d68-5181dfcae9a3", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--9e09315f-14a3-5ed5-b0bf-0457a174c436", "target_ref": "attack-pattern--7861ffbc-2d68-5482-ba5f-32e5a630a7a6" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6b8770b8-60ad-5c90-a52d-120dd88eba86", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--9e09315f-14a3-5ed5-b0bf-0457a174c436", "target_ref": "attack-pattern--77b517cc-4b13-5a1b-8262-fb171254ddb5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8041ab87-8593-5e76-8eeb-3a4b57c4ea79", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--9e09315f-14a3-5ed5-b0bf-0457a174c436", "target_ref": "attack-pattern--4dd355bc-2389-55c4-911c-1bac3744dbbc" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--703c9f4e-0a9b-505a-8da5-5f3ed7ec731c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--9e09315f-14a3-5ed5-b0bf-0457a174c436", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a788ce72-15ba-51f2-b73e-3eb800f5454c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--9e09315f-14a3-5ed5-b0bf-0457a174c436", "target_ref": "attack-pattern--bf6ef44d-fa93-5733-862a-26c1ac15a4b4" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5c999077-46d3-595f-b646-6932ae5513f2", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--816331ca-e049-5853-a31a-a662fd97b5cf", "target_ref": "attack-pattern--e45221c4-74e9-52ab-8e20-96d05003d65a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7ee7747a-4914-56e2-874e-24e8dd917761", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--816331ca-e049-5853-a31a-a662fd97b5cf", "target_ref": "attack-pattern--a55b5859-fa73-5cab-a342-82b97187ea20" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d1365bbd-34f4-5e38-ab77-cf95fbc51e54", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--816331ca-e049-5853-a31a-a662fd97b5cf", "target_ref": "attack-pattern--cccae07c-951c-54bd-bfa4-af87de266370" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9c1d24b3-d80b-5014-a7d3-b42cd98201ca", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--975ee904-35de-59e6-8043-059d6c54a0b6", "target_ref": "attack-pattern--aa324a54-0e77-513e-bc77-dea4683702d2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6e2668f0-a36b-5ba5-8f74-fe6b15102cff", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--975ee904-35de-59e6-8043-059d6c54a0b6", "target_ref": "attack-pattern--f43b3cdc-ed19-5ad0-b661-706c665d9f83" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--17027a34-9b36-58d1-bbe6-36eac89ca1a1", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--975ee904-35de-59e6-8043-059d6c54a0b6", "target_ref": "attack-pattern--a55b5859-fa73-5cab-a342-82b97187ea20" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--70238779-91c9-5240-b28f-0fa7313ea65e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--975ee904-35de-59e6-8043-059d6c54a0b6", "target_ref": "attack-pattern--5deeb2fb-1df3-5566-8229-2e83bd241a08" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0e81a4de-1b0a-5feb-8dea-ebb0b35035cf", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--975ee904-35de-59e6-8043-059d6c54a0b6", "target_ref": "attack-pattern--d9e4a005-06a9-5cee-9f7c-234e20790118" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b2416cda-f7f9-5de0-ac45-a08ad4c3661f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--5f0fc2e5-bf24-5fe8-b150-2904acd9c24a", "target_ref": "attack-pattern--473b0aa4-1cea-57d5-a0a1-9114ebeb1de6" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--99ed7ec2-acd8-57f7-ab62-b9d46c81ebaa", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--5f0fc2e5-bf24-5fe8-b150-2904acd9c24a", "target_ref": "attack-pattern--f5bce1e3-3637-56df-8db9-94e793306171" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--eb2addf0-c7d1-5c21-ab98-8dd09063bdf3", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--5f0fc2e5-bf24-5fe8-b150-2904acd9c24a", "target_ref": "attack-pattern--f81933a4-bfe2-528f-94ef-399577e5a682" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ea4b0021-6d70-57d6-8fb5-784edd9c0069", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--d2d01a0a-ff8b-5be1-aebc-fb2faf53bc12", "target_ref": "attack-pattern--aa324a54-0e77-513e-bc77-dea4683702d2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d17a8846-c120-548d-93bc-5cbc52de4838", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--d2d01a0a-ff8b-5be1-aebc-fb2faf53bc12", "target_ref": "attack-pattern--12a37f6f-1b04-52d2-9ad3-56bca9ba3350" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c45ee1a7-8436-5254-88fd-f90aa505cd28", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--d2d01a0a-ff8b-5be1-aebc-fb2faf53bc12", "target_ref": "attack-pattern--d9e4a005-06a9-5cee-9f7c-234e20790118" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d91747ae-8711-5edf-871a-e9878396131a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--d2d01a0a-ff8b-5be1-aebc-fb2faf53bc12", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--21e1a6b5-d0d7-55d0-bd51-2e11ef183a32", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--cb888f4c-932a-597b-813c-f664dccf5fed", "target_ref": "attack-pattern--f81933a4-bfe2-528f-94ef-399577e5a682" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1692d398-8262-5dee-b400-f448dbd00ccd", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--cb888f4c-932a-597b-813c-f664dccf5fed", "target_ref": "attack-pattern--fd40fed2-9093-5b5a-8ebd-5b288e3ae6c5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--389bed37-4fdb-5ba2-82c4-8e65b95d0762", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--ba6dd1fa-4b5e-52f9-a91a-c0a8e2ad6b74", "target_ref": "attack-pattern--bf1f9ad7-4abc-5204-8d5c-d597d194c7e0" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--19efe9e2-ac78-5cbf-8745-0cfc0c6c5017", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--ba6dd1fa-4b5e-52f9-a91a-c0a8e2ad6b74", "target_ref": "attack-pattern--a019d6df-047d-5759-8cee-e8de54595ade" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--dea2661f-6c8a-55e1-b1fa-32b20c7ab229", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--8c3fb1a1-1e26-5f12-a7ad-c7fdb8579c35", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e8523e64-83c0-5eda-834a-e0a81e6bc7fc", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--8c3fb1a1-1e26-5f12-a7ad-c7fdb8579c35", "target_ref": "attack-pattern--f81933a4-bfe2-528f-94ef-399577e5a682" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--78889f77-98c1-5d23-a422-246b579524bf", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--8c3fb1a1-1e26-5f12-a7ad-c7fdb8579c35", "target_ref": "attack-pattern--fd40fed2-9093-5b5a-8ebd-5b288e3ae6c5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b88c329f-1172-51c4-b31d-f775a5685a2b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--651d754b-a594-5003-af93-edfac0d21b78", "target_ref": "attack-pattern--5deeb2fb-1df3-5566-8229-2e83bd241a08" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7de333b8-0a5c-5c99-9b9c-89d727e480ce", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--651d754b-a594-5003-af93-edfac0d21b78", "target_ref": "attack-pattern--9b65ffc8-0be6-5809-b228-a85033f790ba" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--aa67e226-e1f9-594a-b12f-cc8d6630ba43", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--72b0eb17-bc40-5637-88e2-7ea0256390b4", "target_ref": "attack-pattern--3113300f-d067-5bda-b93a-de6cb0044037" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--33e03016-3e31-5c36-930e-ae7728d39cab", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--72b0eb17-bc40-5637-88e2-7ea0256390b4", "target_ref": "attack-pattern--f43b3cdc-ed19-5ad0-b661-706c665d9f83" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--fd26b52f-4c7f-50c6-b222-b14e0cdf4dad", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--72b0eb17-bc40-5637-88e2-7ea0256390b4", "target_ref": "attack-pattern--a55b5859-fa73-5cab-a342-82b97187ea20" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b0cf67eb-b25d-5493-9e46-6de249170026", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--72b0eb17-bc40-5637-88e2-7ea0256390b4", "target_ref": "attack-pattern--5deeb2fb-1df3-5566-8229-2e83bd241a08" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--cdfb6999-376b-5085-8b2a-c71d1c2b8d21", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--72b0eb17-bc40-5637-88e2-7ea0256390b4", "target_ref": "attack-pattern--e66a56f1-221e-5079-bfe4-99ccbe842a5a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4f188f7e-92a1-5003-a43d-5530418bcb96", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--72b0eb17-bc40-5637-88e2-7ea0256390b4", "target_ref": "attack-pattern--c23370e0-2f94-555e-8e18-e753a767bb51" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b7e0df5d-458e-51f9-b214-14f0c34da77f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--72b0eb17-bc40-5637-88e2-7ea0256390b4", "target_ref": "attack-pattern--5a491154-55c8-5abc-8449-0d48df41514b" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8762a1d2-70df-5fdc-8cd0-2612b71697a3", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--72b0eb17-bc40-5637-88e2-7ea0256390b4", "target_ref": "attack-pattern--d275621f-df75-55ac-974a-4589472dde87" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--141ef20a-e2d2-547f-8a32-ecab16a02ae9", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--b131a12d-8706-53f9-8dcf-93f6b588f7b6", "target_ref": "attack-pattern--e66a56f1-221e-5079-bfe4-99ccbe842a5a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7d428745-6f77-5f00-a490-d6e319bca0cf", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--b131a12d-8706-53f9-8dcf-93f6b588f7b6", "target_ref": "attack-pattern--f81933a4-bfe2-528f-94ef-399577e5a682" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7ebcabaa-2681-5838-b336-96dd446a1fe3", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--b131a12d-8706-53f9-8dcf-93f6b588f7b6", "target_ref": "attack-pattern--fd40fed2-9093-5b5a-8ebd-5b288e3ae6c5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9998c3b3-9110-5b46-bdf1-8a0f9717a84c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--dea77171-fc99-559a-97d7-8f63587f0762", "target_ref": "attack-pattern--77b517cc-4b13-5a1b-8262-fb171254ddb5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--aa98aeb1-102c-57d5-9bf7-2b4510cb8dbb", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--dea77171-fc99-559a-97d7-8f63587f0762", "target_ref": "attack-pattern--78f0aa7b-06b4-5266-b348-58db62932a71" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--65550be9-7681-5bc4-a71d-a358e7abf3ff", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--0915f209-beb9-58ae-b0b2-1a4a6b9fbd38", "target_ref": "attack-pattern--f5bce1e3-3637-56df-8db9-94e793306171" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--88cfd846-2629-5a72-a28a-229b4d2bd740", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--0915f209-beb9-58ae-b0b2-1a4a6b9fbd38", "target_ref": "attack-pattern--f81933a4-bfe2-528f-94ef-399577e5a682" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--89bbb69c-96e1-56a0-97c3-05109a67683b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--aa398960-58de-542f-a3bd-11b41dba3986", "target_ref": "attack-pattern--f7bfa62c-b23c-5fef-a74b-bca3b34cf4df" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--02df1797-e745-52e7-b5a7-b587db20e3b7", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--aa398960-58de-542f-a3bd-11b41dba3986", "target_ref": "attack-pattern--13ac496a-4463-5007-af2b-d6cc9503a3ac" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ba0922ff-5a63-50c0-ab39-be0bfc617802", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--adf447b8-da70-5bca-82b7-cb56a8a31ca3", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8c2faafa-42b4-5683-b3de-d0bcbe955690", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--adf447b8-da70-5bca-82b7-cb56a8a31ca3", "target_ref": "attack-pattern--e69d7f82-fe18-5677-abba-9dd6347bc5a2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7b3884d7-138f-5ec7-9e22-a489bfe6c1b5", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--adf447b8-da70-5bca-82b7-cb56a8a31ca3", "target_ref": "attack-pattern--093e472c-281c-5e78-9228-486255d3058a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2eeec459-aeb6-508b-88d6-17b4fd41bf94", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--adf447b8-da70-5bca-82b7-cb56a8a31ca3", "target_ref": "attack-pattern--1d0e4f47-8c77-58a2-b885-f44145ed3bf4" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c96dee0d-cd63-5436-bcb6-4b4c12015656", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--1b6da42f-dd14-54ab-85c8-116e843c5953", "target_ref": "attack-pattern--f474475e-47e9-57d5-b8d1-35077726b770" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--df1c2541-abbc-51df-b865-5ee56afc5f58", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--1b6da42f-dd14-54ab-85c8-116e843c5953", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1b04b733-7188-5fd0-8faa-7affe1452a07", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--1b6da42f-dd14-54ab-85c8-116e843c5953", "target_ref": "attack-pattern--e69d7f82-fe18-5677-abba-9dd6347bc5a2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8e201d90-db7f-581f-9ca8-c90701b9ae45", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--5695a8b2-1dbe-5626-8eb6-4e23f01bd9ea", "target_ref": "attack-pattern--13ac496a-4463-5007-af2b-d6cc9503a3ac" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5563fc7c-2c4c-5c94-af73-54d1f19ac7a7", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--5695a8b2-1dbe-5626-8eb6-4e23f01bd9ea", "target_ref": "attack-pattern--9b65ffc8-0be6-5809-b228-a85033f790ba" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--37f197c0-65a7-58b0-9ef2-7712dbb2d9b2", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--3cc23fd5-148a-56fe-b63e-7c821478db63", "target_ref": "attack-pattern--473b0aa4-1cea-57d5-a0a1-9114ebeb1de6" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ca660e75-8230-5d56-ae4c-b595ac882d95", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--3cc23fd5-148a-56fe-b63e-7c821478db63", "target_ref": "attack-pattern--b8d62a9c-14cd-503a-af8d-a26b825dffcd" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--847f00e0-a246-564d-ac49-bc1e584d4386", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--3cc23fd5-148a-56fe-b63e-7c821478db63", "target_ref": "x-oak-tactic--7fa7f00b-059a-5a92-b145-0893b4530bb6" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e92c6f6f-ca22-5f60-8858-c1e63563d90c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--8ab74637-4e95-586f-b9bf-6ef174aadda2", "target_ref": "attack-pattern--5deeb2fb-1df3-5566-8229-2e83bd241a08" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4124abe5-f062-5af2-a1e1-7d3a4269d382", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--8ab74637-4e95-586f-b9bf-6ef174aadda2", "target_ref": "attack-pattern--cccae07c-951c-54bd-bfa4-af87de266370" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--bacc78af-b8dd-564e-bfc1-146eb0f9b7cb", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--36b269cd-6ab9-5fbd-948e-117a5002226c", "target_ref": "attack-pattern--3113300f-d067-5bda-b93a-de6cb0044037" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a6f636dd-a58b-5cba-834e-a62cc018890f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--36b269cd-6ab9-5fbd-948e-117a5002226c", "target_ref": "attack-pattern--473b0aa4-1cea-57d5-a0a1-9114ebeb1de6" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1c36faa7-5320-591c-9f7c-6963f80f9eda", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--36b269cd-6ab9-5fbd-948e-117a5002226c", "target_ref": "attack-pattern--2e0bf741-b432-58e7-8948-f5599bf0209e" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--204c2c1f-3c66-5fb8-a031-808800c5d327", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--59b8f56f-3395-522b-bf7b-4e8d0d3c412a", "target_ref": "attack-pattern--03407478-76ff-57d8-bf96-1cb5b5108d9d" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5e8b21c6-0443-5507-93f2-89db45c0e8ce", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--59b8f56f-3395-522b-bf7b-4e8d0d3c412a", "target_ref": "attack-pattern--b6a77deb-14ae-59e3-b4b2-b73065972b6c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1aa0d48f-5177-5eef-9493-aa87260549c9", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--59b8f56f-3395-522b-bf7b-4e8d0d3c412a", "target_ref": "attack-pattern--9b65ffc8-0be6-5809-b228-a85033f790ba" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--bb9cae57-7144-5f7f-b841-b8631fd98071", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--55345874-bd04-5b42-ae89-b4cb47f8eb07", "target_ref": "attack-pattern--1a600b6f-3cbd-5141-822e-9577e857e9ec" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--39d5d0ae-9698-51b6-aa0b-1b411726d95f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--55345874-bd04-5b42-ae89-b4cb47f8eb07", "target_ref": "attack-pattern--5deeb2fb-1df3-5566-8229-2e83bd241a08" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2f5fc303-862b-5d96-bd5e-cfe0264fd614", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--55345874-bd04-5b42-ae89-b4cb47f8eb07", "target_ref": "attack-pattern--9b65ffc8-0be6-5809-b228-a85033f790ba" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3c634944-134a-5767-9c20-9d212b7166ac", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--fc6cdda3-33f9-5d58-b2a1-a6dffa704921", "target_ref": "attack-pattern--e9d0e479-5424-55c4-ab48-976a7a671010" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7080cd1a-3ae2-5e7b-876e-ee4a5f429be5", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--fc6cdda3-33f9-5d58-b2a1-a6dffa704921", "target_ref": "attack-pattern--50650ed5-e07d-5fe8-9adf-7adb33f8182e" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7ed094c0-cb7f-5c70-af2a-2f88e1c989ee", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--392caf1f-8590-585e-bdd1-b9a365145119", "target_ref": "attack-pattern--f81933a4-bfe2-528f-94ef-399577e5a682" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0df82720-9358-5fed-b8da-959bd86bee1e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--392caf1f-8590-585e-bdd1-b9a365145119", "target_ref": "attack-pattern--50650ed5-e07d-5fe8-9adf-7adb33f8182e" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5a60682e-1d10-5a98-917e-d63b733172c7", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--95cfe5ac-b917-5146-b6ad-e599f8e58e8a", "target_ref": "attack-pattern--f474475e-47e9-57d5-b8d1-35077726b770" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8fbfe4b8-e0e0-5d48-a58a-74419fff7f48", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--f97413dc-7449-56bb-b7bd-6dc14013c734", "target_ref": "attack-pattern--99c728d0-3e0c-55a4-906f-55c349257e5d" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f65188fe-b3b7-5b90-9af7-ec1c5ee44522", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--f97413dc-7449-56bb-b7bd-6dc14013c734", "target_ref": "attack-pattern--d9e4a005-06a9-5cee-9f7c-234e20790118" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5a2b418c-3da4-5245-81c9-fa2d8c8f059f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--f97413dc-7449-56bb-b7bd-6dc14013c734", "target_ref": "attack-pattern--bf6ef44d-fa93-5733-862a-26c1ac15a4b4" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--41de63ca-41bf-5540-9d5a-728ad4c091aa", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--b042913e-4e3b-5b12-9120-ffad15fee53e", "target_ref": "attack-pattern--f7bfa62c-b23c-5fef-a74b-bca3b34cf4df" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--08981234-8d91-5eb1-ade6-109ac5501ccc", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--b042913e-4e3b-5b12-9120-ffad15fee53e", "target_ref": "attack-pattern--1ee085bf-8883-5633-8d72-6951adb3006d" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c1cf194e-d902-51d2-ba8c-283f426b52fd", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--d2f35ee5-92bd-584c-ba06-e98b29116c73", "target_ref": "attack-pattern--5deeb2fb-1df3-5566-8229-2e83bd241a08" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--913e889d-b39b-5f8e-ae6a-2842150099e7", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--d2f35ee5-92bd-584c-ba06-e98b29116c73", "target_ref": "attack-pattern--f5bce1e3-3637-56df-8db9-94e793306171" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7bf64647-b040-5688-bd70-c99f6cef0588", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--d2f35ee5-92bd-584c-ba06-e98b29116c73", "target_ref": "attack-pattern--f81933a4-bfe2-528f-94ef-399577e5a682" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--84ee6f5f-c561-5199-b927-9bdeba231f64", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--90fdb17e-af56-5c23-80c9-af22b2093121", "target_ref": "attack-pattern--f5bce1e3-3637-56df-8db9-94e793306171" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8bb26061-01c8-50ec-b1b0-334c2a7192c6", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--90fdb17e-af56-5c23-80c9-af22b2093121", "target_ref": "attack-pattern--f81933a4-bfe2-528f-94ef-399577e5a682" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a4cb4316-ef29-59d7-8170-2fe022d63ec4", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--b590fa86-2145-5657-8e37-0ed1fdb25b47", "target_ref": "attack-pattern--a55b5859-fa73-5cab-a342-82b97187ea20" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c8205fb4-2c6d-51b8-b906-f75690f9b73b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--b9b53703-7be8-5990-812b-e0f0bffc4d84", "target_ref": "attack-pattern--aa324a54-0e77-513e-bc77-dea4683702d2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8e40de95-382a-50d6-bc36-914ef4fe2026", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--b9b53703-7be8-5990-812b-e0f0bffc4d84", "target_ref": "attack-pattern--5deeb2fb-1df3-5566-8229-2e83bd241a08" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0b7a2a27-8d21-599e-81b7-8e36999597f2", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--b9b53703-7be8-5990-812b-e0f0bffc4d84", "target_ref": "attack-pattern--d9e4a005-06a9-5cee-9f7c-234e20790118" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b5c296b2-b888-54d0-9621-c3a1f8dc656c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--961ba7f6-892d-56d2-b740-1dc2b2ececeb", "target_ref": "attack-pattern--44a15cd3-db68-5127-b8dd-cb96e537e3b7" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0dd852d0-7536-5ec0-9b8c-55e16d44211b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--961ba7f6-892d-56d2-b740-1dc2b2ececeb", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--941a02c3-8ca7-5a92-aab7-28a94859cdf0", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--961ba7f6-892d-56d2-b740-1dc2b2ececeb", "target_ref": "attack-pattern--9b65ffc8-0be6-5809-b228-a85033f790ba" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d4a10139-e36c-5db2-9c68-118f77e85f6e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--0648aa77-84e2-563e-84a9-40edc5b38b56", "target_ref": "attack-pattern--cf39fa63-9044-5279-8ea5-4acb64d53904" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--337d9e77-9ae5-55aa-b3d4-126831758757", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--0648aa77-84e2-563e-84a9-40edc5b38b56", "target_ref": "attack-pattern--9b65ffc8-0be6-5809-b228-a85033f790ba" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--16de24ee-f7de-5c48-aeea-37af510e2231", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--ccb266e6-91c1-5c80-ac58-9a7322bf5f1e", "target_ref": "attack-pattern--2a21b0c6-c06c-5130-9114-0d760dcb5b2c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--af50d68b-d89f-5365-8901-316bb57cf201", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--ccb266e6-91c1-5c80-ac58-9a7322bf5f1e", "target_ref": "attack-pattern--7861ffbc-2d68-5482-ba5f-32e5a630a7a6" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b95d19dc-6d84-5db2-b915-de45be3b0d1d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--ccb266e6-91c1-5c80-ac58-9a7322bf5f1e", "target_ref": "attack-pattern--77b517cc-4b13-5a1b-8262-fb171254ddb5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4384bc4c-68f6-5668-82b8-d2b812f48b84", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--ccb266e6-91c1-5c80-ac58-9a7322bf5f1e", "target_ref": "attack-pattern--4dd355bc-2389-55c4-911c-1bac3744dbbc" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d531db40-2a84-5fc6-815b-188bf05e8e66", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--ccb266e6-91c1-5c80-ac58-9a7322bf5f1e", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4ca27122-52e4-5460-8e6c-35018b026a6b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--ccb266e6-91c1-5c80-ac58-9a7322bf5f1e", "target_ref": "attack-pattern--093e472c-281c-5e78-9228-486255d3058a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a0bf8ed5-3dad-51b9-addc-64ae8c5baf8d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--ccb266e6-91c1-5c80-ac58-9a7322bf5f1e", "target_ref": "attack-pattern--1d0e4f47-8c77-58a2-b885-f44145ed3bf4" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--911cbb50-5ead-5697-a7e1-58d3f6f07f08", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--6aa41ba8-b077-5bc4-a4c0-ca99acc171b2", "target_ref": "attack-pattern--44a15cd3-db68-5127-b8dd-cb96e537e3b7" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--59411fcd-ff3d-5a0c-a374-8f97d9df7eed", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--6aa41ba8-b077-5bc4-a4c0-ca99acc171b2", "target_ref": "attack-pattern--9b65ffc8-0be6-5809-b228-a85033f790ba" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0ea7fbb1-3676-5382-bb6c-f78fd8b93155", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--4f52be00-9c19-5e4d-8a46-90f280eba4f3", "target_ref": "attack-pattern--b6a77deb-14ae-59e3-b4b2-b73065972b6c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--03938b25-0643-568a-b29a-b50c2358eb83", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--4f52be00-9c19-5e4d-8a46-90f280eba4f3", "target_ref": "attack-pattern--50650ed5-e07d-5fe8-9adf-7adb33f8182e" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2afbba3f-8064-598a-bd41-69f8081525ff", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--25c75f7b-115d-5856-ba72-06da1bbc22cc", "target_ref": "attack-pattern--aa324a54-0e77-513e-bc77-dea4683702d2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0816ccfd-fa50-58c9-aaae-fbc5863425c7", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--25c75f7b-115d-5856-ba72-06da1bbc22cc", "target_ref": "attack-pattern--f7bfa62c-b23c-5fef-a74b-bca3b34cf4df" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5289107a-5b28-5818-ba2b-849fc6d04f7c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--29a6ed0e-caee-5bf7-97b4-ecb3b088ac43", "target_ref": "attack-pattern--f5bce1e3-3637-56df-8db9-94e793306171" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e61bf2fb-e3ed-51db-b4e0-7a90c5a6a884", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--29a6ed0e-caee-5bf7-97b4-ecb3b088ac43", "target_ref": "attack-pattern--f81933a4-bfe2-528f-94ef-399577e5a682" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--33f3e93b-fd8a-551b-81c5-abda0e238d51", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--ebfdbb47-ac94-5462-a122-5174e6c53716", "target_ref": "attack-pattern--5deeb2fb-1df3-5566-8229-2e83bd241a08" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--fb666cbe-5a5b-5d61-a070-628e59ae81ca", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--ebfdbb47-ac94-5462-a122-5174e6c53716", "target_ref": "attack-pattern--d9e4a005-06a9-5cee-9f7c-234e20790118" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--cfb6d60a-ef90-5ebd-92a6-3e772336b7d6", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--ebfdbb47-ac94-5462-a122-5174e6c53716", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c7deab27-644c-59f7-8453-49b2c00c7573", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--cf232de7-b709-53a8-9f2f-b45dcf4c72b3", "target_ref": "attack-pattern--f5bce1e3-3637-56df-8db9-94e793306171" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--cc9cc1c0-f567-522c-b2ba-4bbc96cbd205", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--cf232de7-b709-53a8-9f2f-b45dcf4c72b3", "target_ref": "attack-pattern--f81933a4-bfe2-528f-94ef-399577e5a682" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--dad26f09-c8fb-5e9b-87d5-ed3a3fb409e1", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--053cd2a4-8b08-5f39-9213-1b4673012dd0", "target_ref": "attack-pattern--3113300f-d067-5bda-b93a-de6cb0044037" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d8d15861-3d7a-52fc-9791-10f0a36f077a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--053cd2a4-8b08-5f39-9213-1b4673012dd0", "target_ref": "attack-pattern--a55b5859-fa73-5cab-a342-82b97187ea20" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--042492e7-8183-58f4-a8a5-b7690fcfd163", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--053cd2a4-8b08-5f39-9213-1b4673012dd0", "target_ref": "attack-pattern--5deeb2fb-1df3-5566-8229-2e83bd241a08" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6c2b0d5b-b8bc-5bcb-a8da-a1f58b68dd7f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--053cd2a4-8b08-5f39-9213-1b4673012dd0", "target_ref": "attack-pattern--bf6ef44d-fa93-5733-862a-26c1ac15a4b4" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b46f7694-6e0a-5d59-9422-73f0519450d5", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--44e20af0-2810-5a40-86d2-69fbfccbd05d", "target_ref": "attack-pattern--2a21b0c6-c06c-5130-9114-0d760dcb5b2c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d679a4e3-6a84-51bd-b3de-68c2532aa610", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--44e20af0-2810-5a40-86d2-69fbfccbd05d", "target_ref": "attack-pattern--77b517cc-4b13-5a1b-8262-fb171254ddb5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e68fecdb-d1c9-5b40-af08-665ae63e1d15", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--44e20af0-2810-5a40-86d2-69fbfccbd05d", "target_ref": "attack-pattern--4dd355bc-2389-55c4-911c-1bac3744dbbc" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e80f29aa-176f-59bc-8368-7e0d84de56df", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--44e20af0-2810-5a40-86d2-69fbfccbd05d", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b8cd7092-1818-5122-9555-b5d8838577d1", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--44e20af0-2810-5a40-86d2-69fbfccbd05d", "target_ref": "attack-pattern--093e472c-281c-5e78-9228-486255d3058a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--57bcd291-c308-5ae3-8f53-bf27518afc21", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--44e20af0-2810-5a40-86d2-69fbfccbd05d", "target_ref": "attack-pattern--bf6ef44d-fa93-5733-862a-26c1ac15a4b4" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--959bd1ae-b3f7-5cbd-99d5-b41a35548dc6", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--998cff56-85c9-5267-8029-37489ccbd668", "target_ref": "attack-pattern--77b517cc-4b13-5a1b-8262-fb171254ddb5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3115d33c-6260-593a-bdc9-84dd9342b83d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--998cff56-85c9-5267-8029-37489ccbd668", "target_ref": "attack-pattern--7ec6ff5b-83cd-5725-adda-2b5d3a846414" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2b4cd875-5195-5b42-8493-fcca97875755", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--d8f8ffad-f4cb-5720-957c-9fdacb3db23f", "target_ref": "attack-pattern--2a21b0c6-c06c-5130-9114-0d760dcb5b2c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9e94f1c5-99b0-5683-903b-217751707bd2", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--d8f8ffad-f4cb-5720-957c-9fdacb3db23f", "target_ref": "attack-pattern--5deeb2fb-1df3-5566-8229-2e83bd241a08" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--649326bb-88f3-56c9-9d17-a7f17ab9b600", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--d8f8ffad-f4cb-5720-957c-9fdacb3db23f", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7f6b9dc5-bc5c-56a3-aef7-51d13bfe87e1", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--9c769832-3963-5e46-bb17-e738491dcd58", "target_ref": "attack-pattern--2a21b0c6-c06c-5130-9114-0d760dcb5b2c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9f66faf5-488e-5296-a5dd-3f232df3f78d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--9c769832-3963-5e46-bb17-e738491dcd58", "target_ref": "attack-pattern--5deeb2fb-1df3-5566-8229-2e83bd241a08" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--27cc5c76-d5cb-5db0-8564-9cdd6c627143", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--290062f6-beea-50fe-a71f-6811e5934d4e", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ddc575cf-663f-5035-a84a-4a2b4312f917", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--290062f6-beea-50fe-a71f-6811e5934d4e", "target_ref": "attack-pattern--e69d7f82-fe18-5677-abba-9dd6347bc5a2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5cbf1eff-63f0-533c-af9c-0f8c79b29bca", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--290062f6-beea-50fe-a71f-6811e5934d4e", "target_ref": "attack-pattern--093e472c-281c-5e78-9228-486255d3058a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--66af0144-d9c9-52dd-95c0-1b9bc3e26bba", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--8f0ff76a-6f07-5f8f-a0ed-c858d785530f", "target_ref": "attack-pattern--7861ffbc-2d68-5482-ba5f-32e5a630a7a6" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c1cf6b3e-6be5-5ddf-b0ad-12c79227c9c2", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--8f0ff76a-6f07-5f8f-a0ed-c858d785530f", "target_ref": "attack-pattern--f474475e-47e9-57d5-b8d1-35077726b770" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d4e8fea4-f5cc-5f11-97c6-0cea24c4a69d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--8f0ff76a-6f07-5f8f-a0ed-c858d785530f", "target_ref": "attack-pattern--bf6ef44d-fa93-5733-862a-26c1ac15a4b4" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--70a2cb68-8153-5ad4-aa60-68f39e554e3b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--e323e347-10a4-5f99-ad9c-129e5055733c", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5e31c2ce-105c-54da-961a-c0676ea9c50f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--e323e347-10a4-5f99-ad9c-129e5055733c", "target_ref": "attack-pattern--093e472c-281c-5e78-9228-486255d3058a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b5f560bf-8f12-5904-9d24-5710b6005c0e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--e323e347-10a4-5f99-ad9c-129e5055733c", "target_ref": "attack-pattern--bf6ef44d-fa93-5733-862a-26c1ac15a4b4" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--83709a11-e7b4-5290-b730-18b18977db9c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--e323e347-10a4-5f99-ad9c-129e5055733c", "target_ref": "attack-pattern--1d0e4f47-8c77-58a2-b885-f44145ed3bf4" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a6f696b2-1b8e-513d-8736-4aaaa97a45ca", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--4f02b42e-cf1f-502e-8a44-b09aa6d21f88", "target_ref": "attack-pattern--44a15cd3-db68-5127-b8dd-cb96e537e3b7" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--91eabf1c-a382-50e1-a0af-38508c687428", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--4f02b42e-cf1f-502e-8a44-b09aa6d21f88", "target_ref": "attack-pattern--2a21b0c6-c06c-5130-9114-0d760dcb5b2c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5609d653-9c08-5b16-b2d1-776a2ac562ab", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--4f02b42e-cf1f-502e-8a44-b09aa6d21f88", "target_ref": "attack-pattern--e66a56f1-221e-5079-bfe4-99ccbe842a5a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--34ce5c99-114e-531e-baf1-f3beadc714a9", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--4f02b42e-cf1f-502e-8a44-b09aa6d21f88", "target_ref": "attack-pattern--cccae07c-951c-54bd-bfa4-af87de266370" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3cf6d8de-24d0-5fae-bf5f-ac4e8a854cee", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--4f02b42e-cf1f-502e-8a44-b09aa6d21f88", "target_ref": "attack-pattern--f5bce1e3-3637-56df-8db9-94e793306171" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--483babb0-c8c7-5696-bb8e-1da728a88f63", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--4f02b42e-cf1f-502e-8a44-b09aa6d21f88", "target_ref": "attack-pattern--f81933a4-bfe2-528f-94ef-399577e5a682" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6ec95a68-6d46-577b-8bca-119e2f6cd669", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--4f02b42e-cf1f-502e-8a44-b09aa6d21f88", "target_ref": "attack-pattern--9b65ffc8-0be6-5809-b228-a85033f790ba" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7b1a9501-413c-579a-858a-6356bb99829b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--4f02b42e-cf1f-502e-8a44-b09aa6d21f88", "target_ref": "attack-pattern--8fea3d14-6b55-534c-986e-1c6f3d1638f2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c8146a9b-34bb-5c2b-81cb-5cc7d5db857a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--4f02b42e-cf1f-502e-8a44-b09aa6d21f88", "target_ref": "attack-pattern--e9d0e479-5424-55c4-ab48-976a7a671010" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2ce5feaa-1a2d-5cdc-a335-0836b2e9ff83", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--8b9faa1c-1574-588a-a36c-e3a03d918570", "target_ref": "attack-pattern--f474475e-47e9-57d5-b8d1-35077726b770" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5a36b685-5326-5759-9bf9-1c929b8aee86", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--8b9faa1c-1574-588a-a36c-e3a03d918570", "target_ref": "attack-pattern--a7ebcbb2-dafe-5364-9932-e3d7bee02596" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1f381bf6-1257-535a-bf97-d6e87b9ec386", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--8b9faa1c-1574-588a-a36c-e3a03d918570", "target_ref": "attack-pattern--bf6ef44d-fa93-5733-862a-26c1ac15a4b4" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8e8b98da-940f-509f-a59a-1ec23d8d4da6", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--2a441b71-be64-5318-8f90-fbf0b6da4367", "target_ref": "attack-pattern--a33bad38-8e4f-5cdd-a0a4-779143c81d8d" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--88876818-0908-572c-9814-02eb9301f03a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--2a441b71-be64-5318-8f90-fbf0b6da4367", "target_ref": "attack-pattern--2addb763-67df-5522-8864-f3f0d400252a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--56771102-b234-513d-92b8-84c41cb86374", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--af3efffc-ed6b-5517-b584-4f315b5a9b26", "target_ref": "attack-pattern--b19923a2-b45b-5106-935d-f52d0d875a94" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4e0a954c-055e-5ce9-ac45-7fd42848bd16", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--af3efffc-ed6b-5517-b584-4f315b5a9b26", "target_ref": "attack-pattern--13ac496a-4463-5007-af2b-d6cc9503a3ac" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--709d246b-24fb-54c5-8516-20f5b1803d66", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--af3efffc-ed6b-5517-b584-4f315b5a9b26", "target_ref": "attack-pattern--b6a77deb-14ae-59e3-b4b2-b73065972b6c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--dc4caefc-3309-55df-a290-9e43e1f65a57", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--842940b8-69f2-5668-9b4d-929540d2868d", "target_ref": "attack-pattern--2e0bf741-b432-58e7-8948-f5599bf0209e" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c752aaa2-8015-5864-be28-ed7fa5e06194", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--842940b8-69f2-5668-9b4d-929540d2868d", "target_ref": "attack-pattern--39564b4f-4af2-5b1a-8405-eb8cf9d2f12b" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--bf3aabeb-4df3-5bfc-9dd2-eb4ae9770d12", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--e8c6a391-2d17-5921-b9c7-82daaa273cf9", "target_ref": "attack-pattern--7861ffbc-2d68-5482-ba5f-32e5a630a7a6" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--860205f0-8c67-5a4e-b8ed-2675ca3f608b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--e8c6a391-2d17-5921-b9c7-82daaa273cf9", "target_ref": "attack-pattern--f474475e-47e9-57d5-b8d1-35077726b770" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f8a79ad1-efd6-5cf0-813d-51aeedb95f80", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--e8c6a391-2d17-5921-b9c7-82daaa273cf9", "target_ref": "attack-pattern--bf6ef44d-fa93-5733-862a-26c1ac15a4b4" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--94e00218-ae97-5b39-9ea7-d0b2d8e87baa", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--8fe1f01c-a6d9-59b8-a829-a2dea80edc3f", "target_ref": "attack-pattern--c5adc3a0-7ace-5a7f-b629-506415142209" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--18eb0561-0858-5218-9840-2572a7de2625", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--8fe1f01c-a6d9-59b8-a829-a2dea80edc3f", "target_ref": "attack-pattern--be296581-d897-5922-9a9a-964e99817421" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--03ac3f8f-0747-5936-9158-0ac2284781cb", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--8fe1f01c-a6d9-59b8-a829-a2dea80edc3f", "target_ref": "attack-pattern--df7c55f8-7843-5ec8-af64-44eff860294b" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--34f849ec-b126-5287-8bcd-a48a16d9e8fb", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--8fe1f01c-a6d9-59b8-a829-a2dea80edc3f", "target_ref": "attack-pattern--f5bce1e3-3637-56df-8db9-94e793306171" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d51d5326-05a6-5b6f-b81b-4d84f6d91f1d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--d290a4ba-0f5d-59ae-9c04-3ed929acf4c3", "target_ref": "attack-pattern--51de129b-35c6-52ab-baa1-4952b944dad8" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b83d91c7-dc2f-5023-aeaf-e1304ba0f3a1", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--d290a4ba-0f5d-59ae-9c04-3ed929acf4c3", "target_ref": "attack-pattern--54be17f0-8dd4-5ea7-8043-93eb5530c507" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--10c37e90-2e93-557c-9f87-f181bbba15ec", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--d29690f6-ce75-5258-ae64-32a0f9701ade", "target_ref": "attack-pattern--c23370e0-2f94-555e-8e18-e753a767bb51" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9e7d33b7-aa5c-528a-b4e6-b2a9139695e6", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--d29690f6-ce75-5258-ae64-32a0f9701ade", "target_ref": "attack-pattern--d275621f-df75-55ac-974a-4589472dde87" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7f51281c-d3cd-5497-832a-34d7d8c93b17", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--903380b6-4836-5c4d-a7df-83e8df646ace", "target_ref": "attack-pattern--3113300f-d067-5bda-b93a-de6cb0044037" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--965c766f-72d4-5db0-bb80-a59d839e9937", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--903380b6-4836-5c4d-a7df-83e8df646ace", "target_ref": "attack-pattern--aa324a54-0e77-513e-bc77-dea4683702d2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--fe782bc7-74d5-50f9-9bcb-316411aa2367", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--903380b6-4836-5c4d-a7df-83e8df646ace", "target_ref": "attack-pattern--473b0aa4-1cea-57d5-a0a1-9114ebeb1de6" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--61a0c6ae-b9e7-5259-8683-5fce793caf05", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--903380b6-4836-5c4d-a7df-83e8df646ace", "target_ref": "attack-pattern--b8d62a9c-14cd-503a-af8d-a26b825dffcd" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--65a6cc3f-c5f1-55f2-b5db-c4f4fe312763", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--903380b6-4836-5c4d-a7df-83e8df646ace", "target_ref": "attack-pattern--921bd515-01df-5ee1-a643-7138f8d1ee7c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4abea4b8-c393-5fbe-9f1a-8a8e75ee7356", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--903380b6-4836-5c4d-a7df-83e8df646ace", "target_ref": "attack-pattern--5deeb2fb-1df3-5566-8229-2e83bd241a08" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--68307468-d0ba-54bd-9823-96bca3d66922", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--4988d413-6566-5ccd-afcf-da978a2c73f7", "target_ref": "attack-pattern--99c728d0-3e0c-55a4-906f-55c349257e5d" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--49de05bf-dc25-5f5c-a7b8-d7ac3b37cc02", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--4988d413-6566-5ccd-afcf-da978a2c73f7", "target_ref": "attack-pattern--f65581dd-3a77-50d8-b85f-c0df5e90b22f" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7ad5c7ac-2c45-50e0-9130-55d1ca8f4e30", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--17141912-47cc-50eb-9b54-8de7930852a9", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--cc8555d1-f6a4-5aec-8ca6-f11dc88cd4a6", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--17141912-47cc-50eb-9b54-8de7930852a9", "target_ref": "attack-pattern--a508cca2-dfea-5831-9bd5-f7d69abe422b" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--cddb7f8d-c274-532e-89bd-f982c8533119", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--21bc11ea-3277-5c4d-b9a2-cbd0ae72416c", "target_ref": "attack-pattern--3113300f-d067-5bda-b93a-de6cb0044037" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--596ea35c-fd94-593a-97ab-3572cb1359cf", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--21bc11ea-3277-5c4d-b9a2-cbd0ae72416c", "target_ref": "attack-pattern--a55b5859-fa73-5cab-a342-82b97187ea20" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--41e2430e-69cb-529f-bfe4-e89862191b7f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--21bc11ea-3277-5c4d-b9a2-cbd0ae72416c", "target_ref": "attack-pattern--5deeb2fb-1df3-5566-8229-2e83bd241a08" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--026aedf2-4145-5fc6-93b3-5a38bd7f807e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--21bc11ea-3277-5c4d-b9a2-cbd0ae72416c", "target_ref": "attack-pattern--e66a56f1-221e-5079-bfe4-99ccbe842a5a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--952713b6-fb9f-5f74-8b1d-2eb588d43e0c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--21bc11ea-3277-5c4d-b9a2-cbd0ae72416c", "target_ref": "attack-pattern--5a491154-55c8-5abc-8449-0d48df41514b" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--cd43357c-6700-5521-ab3c-40dd0d2e5982", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--21bc11ea-3277-5c4d-b9a2-cbd0ae72416c", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f9a3a1c1-806f-521c-9aef-25ce8a504004", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--3cbc99ef-568b-56c7-9951-b50a43fdaadc", "target_ref": "attack-pattern--aa324a54-0e77-513e-bc77-dea4683702d2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d118d6cf-fb16-5aa7-93eb-1eb502d00688", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--3cbc99ef-568b-56c7-9951-b50a43fdaadc", "target_ref": "x-oak-tactic--4a289ef4-441e-58b3-869d-49ccfdee57a4" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--33ccffa5-1209-51ee-90ad-18b6454425a5", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--3cbc99ef-568b-56c7-9951-b50a43fdaadc", "target_ref": "attack-pattern--5deeb2fb-1df3-5566-8229-2e83bd241a08" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5252ccc9-3b2c-58bb-96d6-e48db963613d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--c950f109-dfc6-5cda-ac46-cd69b56d2cb6", "target_ref": "attack-pattern--aa324a54-0e77-513e-bc77-dea4683702d2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ba24466d-72de-5194-bcca-a1a303bc2d3c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--c950f109-dfc6-5cda-ac46-cd69b56d2cb6", "target_ref": "x-oak-tactic--4a289ef4-441e-58b3-869d-49ccfdee57a4" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9c89c841-0ed2-51ad-9180-d5e3e8fff3bb", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--c950f109-dfc6-5cda-ac46-cd69b56d2cb6", "target_ref": "attack-pattern--093e472c-281c-5e78-9228-486255d3058a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--83ac2218-7139-53bf-ac5e-6913dc53f2da", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--06fb0c7e-ec99-50ac-a305-4235f73e066f", "target_ref": "attack-pattern--888de015-81a7-52ec-9832-87baca164029" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a285692f-d444-556e-993c-111a6b98fe45", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--06fb0c7e-ec99-50ac-a305-4235f73e066f", "target_ref": "attack-pattern--a55b5859-fa73-5cab-a342-82b97187ea20" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--aaf04c4e-6440-549b-ac82-834560b918f0", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--06fb0c7e-ec99-50ac-a305-4235f73e066f", "target_ref": "attack-pattern--ea13efc1-d0df-532c-8add-3d39dcd29713" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3363ed76-3c8a-5972-a9cb-f533956d5e36", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--4a5f9fda-1682-5618-bd05-5ba947ba00dc", "target_ref": "attack-pattern--647504b6-bc6d-5c30-b18d-82c99e51b62d" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ca0a8dd6-3891-55ae-99bc-8bbf76552d1e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--4a5f9fda-1682-5618-bd05-5ba947ba00dc", "target_ref": "attack-pattern--a33bad38-8e4f-5cdd-a0a4-779143c81d8d" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0290de6d-1167-5f4c-9bd6-4b288ea025f7", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--9bc5da62-86f5-5a8a-a012-d1256c3d0b37", "target_ref": "attack-pattern--44a15cd3-db68-5127-b8dd-cb96e537e3b7" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9a8689d3-d7c3-5c4e-b13e-3ae5e42781f2", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--9bc5da62-86f5-5a8a-a012-d1256c3d0b37", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6d0512dc-11a9-5209-ac05-54ec53cd8d4f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--9bc5da62-86f5-5a8a-a012-d1256c3d0b37", "target_ref": "attack-pattern--9b65ffc8-0be6-5809-b228-a85033f790ba" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ce503fe5-bc45-5588-ba80-5fd857d3f4eb", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--b8c4dfaa-4b2f-5ae6-9794-405f59a30637", "target_ref": "attack-pattern--b8d62a9c-14cd-503a-af8d-a26b825dffcd" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9fdd76ed-d20d-58a0-9bcc-4f46be82d0b7", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--b8c4dfaa-4b2f-5ae6-9794-405f59a30637", "target_ref": "attack-pattern--d9e4a005-06a9-5cee-9f7c-234e20790118" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8345a5cc-8320-5731-874d-d61d4797a748", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--b8c4dfaa-4b2f-5ae6-9794-405f59a30637", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e4a7dc21-0ad3-53fa-b60b-c3f0c35d50a5", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--b8c4dfaa-4b2f-5ae6-9794-405f59a30637", "target_ref": "attack-pattern--bf6ef44d-fa93-5733-862a-26c1ac15a4b4" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f3c91d2e-e055-5287-9acb-ab1d7fe3f7cb", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--5749e28e-b860-5a6d-a3bf-58816729426f", "target_ref": "attack-pattern--aa324a54-0e77-513e-bc77-dea4683702d2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--87a1b27a-b040-5486-ae13-1ed4ed278244", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--5749e28e-b860-5a6d-a3bf-58816729426f", "target_ref": "attack-pattern--94a03321-bd42-5ba5-a14c-869236fb3822" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--35559722-e7d3-5287-af62-3da29e2ced81", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--5749e28e-b860-5a6d-a3bf-58816729426f", "target_ref": "attack-pattern--03407478-76ff-57d8-bf96-1cb5b5108d9d" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f92c2980-be47-5027-9558-447b351d693e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--5749e28e-b860-5a6d-a3bf-58816729426f", "target_ref": "attack-pattern--cccae07c-951c-54bd-bfa4-af87de266370" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b9ead671-a70d-5862-acc0-1dce7f75aba2", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--5749e28e-b860-5a6d-a3bf-58816729426f", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a8012b6f-944d-5871-a6a6-73a743ba48a5", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--5749e28e-b860-5a6d-a3bf-58816729426f", "target_ref": "attack-pattern--b6a77deb-14ae-59e3-b4b2-b73065972b6c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--deb26759-5de2-5ccb-94d5-cd01c55d6fae", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--5749e28e-b860-5a6d-a3bf-58816729426f", "target_ref": "attack-pattern--9b65ffc8-0be6-5809-b228-a85033f790ba" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5b7286ab-dc20-5f01-aec9-f6c86817ae20", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--4a7fff1c-be3a-5b49-8536-477ba7f47c26", "target_ref": "attack-pattern--44a15cd3-db68-5127-b8dd-cb96e537e3b7" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--45638342-3a90-58c9-a0e5-0dde5b671045", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--4a7fff1c-be3a-5b49-8536-477ba7f47c26", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5d31fbe4-f0b6-500b-bb2b-d6db716888fc", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--4a7fff1c-be3a-5b49-8536-477ba7f47c26", "target_ref": "attack-pattern--9b65ffc8-0be6-5809-b228-a85033f790ba" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--099bf696-d0b3-5527-90e1-1a4e57bf815e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--7cdf5535-575e-570f-b881-eb99e8cc22f0", "target_ref": "attack-pattern--44a15cd3-db68-5127-b8dd-cb96e537e3b7" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b40b30e0-53e6-540d-8be6-cb3ab103bd7e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--7cdf5535-575e-570f-b881-eb99e8cc22f0", "target_ref": "attack-pattern--6cfeff7d-dc66-543b-b2f6-8e5e232156bc" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2b14d8c5-8556-5a55-971d-979b0ba99dfb", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--7cdf5535-575e-570f-b881-eb99e8cc22f0", "target_ref": "attack-pattern--9b65ffc8-0be6-5809-b228-a85033f790ba" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d9ce066d-fd69-5ef2-8e60-f6886887365d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--2a05a27c-02e3-5759-a1ca-128278fb0860", "target_ref": "attack-pattern--888de015-81a7-52ec-9832-87baca164029" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5017fcdd-d632-5ee1-9f53-f825277359ac", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--2a05a27c-02e3-5759-a1ca-128278fb0860", "target_ref": "attack-pattern--ea13efc1-d0df-532c-8add-3d39dcd29713" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--dd4ccfd3-bdf2-5aaa-9fdd-1e3ebc9a67ff", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--b069a759-180a-5a08-a7a0-466eb58d553a", "target_ref": "attack-pattern--f80bec40-b7fa-52eb-a6a4-d4acd59dce38" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--eef13baa-5683-5f01-91d7-d733088239fd", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--b069a759-180a-5a08-a7a0-466eb58d553a", "target_ref": "attack-pattern--fd40fed2-9093-5b5a-8ebd-5b288e3ae6c5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--84471b7d-616a-5d8f-b289-c8c149072ec0", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--485b9541-68f8-50f2-bd33-fb55301e92c9", "target_ref": "attack-pattern--aa324a54-0e77-513e-bc77-dea4683702d2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6292c4a2-43eb-5ac7-9951-a50fd56060ba", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--485b9541-68f8-50f2-bd33-fb55301e92c9", "target_ref": "attack-pattern--a55b5859-fa73-5cab-a342-82b97187ea20" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--79561461-8a88-5744-b4d0-ee224c944c76", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--485b9541-68f8-50f2-bd33-fb55301e92c9", "target_ref": "attack-pattern--5deeb2fb-1df3-5566-8229-2e83bd241a08" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--511df75c-0139-5aaa-888c-c16889042164", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--8dd35f8e-c9ee-5ab1-a5f3-f90d4dcec916", "target_ref": "x-oak-tactic--5fc49855-8bca-5500-b810-322019badf15" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7c6544bd-8173-5aec-bfa3-5871b99f6be5", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--8dd35f8e-c9ee-5ab1-a5f3-f90d4dcec916", "target_ref": "attack-pattern--9b65ffc8-0be6-5809-b228-a85033f790ba" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2d5ed028-244d-51ce-b6f4-63439540df10", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--c035d017-ebd4-5174-a741-fd10134b4071", "target_ref": "attack-pattern--f5bce1e3-3637-56df-8db9-94e793306171" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3c33b9d3-6a4f-520b-bf7b-ed88a9ee8946", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--c035d017-ebd4-5174-a741-fd10134b4071", "target_ref": "attack-pattern--f81933a4-bfe2-528f-94ef-399577e5a682" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c19d8768-b018-5aa5-89dd-9e88608f702d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--8d4706bf-2f58-5775-9c2a-f9835fc03a26", "target_ref": "attack-pattern--cf39fa63-9044-5279-8ea5-4acb64d53904" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c020176d-6d8c-5fe6-948a-cdeb08f62047", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--8d4706bf-2f58-5775-9c2a-f9835fc03a26", "target_ref": "attack-pattern--6cfeff7d-dc66-543b-b2f6-8e5e232156bc" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0e6ab647-d55c-58f6-90e3-7bb0a9a3cb3d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--8d4706bf-2f58-5775-9c2a-f9835fc03a26", "target_ref": "attack-pattern--7861ffbc-2d68-5482-ba5f-32e5a630a7a6" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--959a2b8c-ba85-58ca-b609-fec7ca7b21a1", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--8d4706bf-2f58-5775-9c2a-f9835fc03a26", "target_ref": "attack-pattern--77b517cc-4b13-5a1b-8262-fb171254ddb5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--97fc4a63-589c-5f86-b8b8-66c0fbb13357", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--8d4706bf-2f58-5775-9c2a-f9835fc03a26", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--951b3ce3-28c1-5ccf-b754-3cf94f98eb8f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--8d4706bf-2f58-5775-9c2a-f9835fc03a26", "target_ref": "attack-pattern--bf6ef44d-fa93-5733-862a-26c1ac15a4b4" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8aa711c4-8a57-5761-b334-361a882e64c8", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--0c3e6654-9b29-582b-9091-7628b1f30037", "target_ref": "attack-pattern--b19923a2-b45b-5106-935d-f52d0d875a94" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2eb32c6f-b278-5d5b-837b-30871f418c86", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--0c3e6654-9b29-582b-9091-7628b1f30037", "target_ref": "attack-pattern--d9e4a005-06a9-5cee-9f7c-234e20790118" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--74727a12-41ee-566a-8575-358089e74a00", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--0c3e6654-9b29-582b-9091-7628b1f30037", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2831997b-a896-5b6f-9360-a343deaed9ad", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--0c3e6654-9b29-582b-9091-7628b1f30037", "target_ref": "attack-pattern--f81933a4-bfe2-528f-94ef-399577e5a682" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0dc0a80f-ccd9-50d7-9fce-cbfd5b20f692", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--0c3e6654-9b29-582b-9091-7628b1f30037", "target_ref": "attack-pattern--b6a77deb-14ae-59e3-b4b2-b73065972b6c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a6c08bcf-8685-5258-9732-dc96cdc4b342", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--0887b044-cc60-5095-860f-75c6bbd80fab", "target_ref": "x-oak-tactic--a05710d6-773d-5671-81e6-1a9d53ce156a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e9a7e8ed-fc17-56f9-bb9c-ed700d37f6b8", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--0887b044-cc60-5095-860f-75c6bbd80fab", "target_ref": "attack-pattern--f7bfa62c-b23c-5fef-a74b-bca3b34cf4df" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6dbcbcaf-3ec2-5917-adaf-9c9f31ee1cdd", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--0887b044-cc60-5095-860f-75c6bbd80fab", "target_ref": "attack-pattern--94a03321-bd42-5ba5-a14c-869236fb3822" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--fecef3be-ec24-5a9a-aa18-a23475f95683", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--0887b044-cc60-5095-860f-75c6bbd80fab", "target_ref": "attack-pattern--a7929123-b1d5-5eee-b042-dc7812bdd713" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6682aaba-bfe8-53b1-928e-a14c6b4d540f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--0887b044-cc60-5095-860f-75c6bbd80fab", "target_ref": "attack-pattern--92ca3ca4-e512-53c5-be45-1f8b05cc913b" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--68200bc1-0355-5277-b303-501041b8111e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--cd47fab3-e626-54a4-ad27-4e4d2da3ad16", "target_ref": "attack-pattern--0fd4fcde-3464-5d2d-86ac-7c68035870a3" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--17847340-1cc7-555e-a5bf-3a25e3a6cd56", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--cd47fab3-e626-54a4-ad27-4e4d2da3ad16", "target_ref": "attack-pattern--19b22847-2104-5eb9-a74c-4e7ef6195ab8" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7c07d2a3-9b6c-50a5-ada3-b139dda234ca", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--cd47fab3-e626-54a4-ad27-4e4d2da3ad16", "target_ref": "x-oak-tactic--462dc46f-d3c8-5956-9fcd-83fd745b277a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2625b5b8-4663-5094-8e94-19a995615ea5", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--cd47fab3-e626-54a4-ad27-4e4d2da3ad16", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--35ee9ec8-dbbb-5034-a2fd-829fdbf7f8ea", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--68ee177f-50ee-5855-a84b-3112e3c2bda7", "target_ref": "attack-pattern--be296581-d897-5922-9a9a-964e99817421" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6dc5376d-4434-5e7b-9f04-f25bbb9ce9b8", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--68ee177f-50ee-5855-a84b-3112e3c2bda7", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--12c42866-3723-5bc0-981c-cfd3272f9bd0", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--68ee177f-50ee-5855-a84b-3112e3c2bda7", "target_ref": "attack-pattern--f5bce1e3-3637-56df-8db9-94e793306171" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9023e97c-4efe-5fcf-a56b-ec7273e0b1bd", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--8519075b-67a5-57d8-81fd-47d460e6c52d", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9056d4bb-b6c5-596d-8c8a-b3b806953234", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--8519075b-67a5-57d8-81fd-47d460e6c52d", "target_ref": "attack-pattern--f5bce1e3-3637-56df-8db9-94e793306171" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--49cb3980-ee50-5e6c-ac82-364f130abe8a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--8519075b-67a5-57d8-81fd-47d460e6c52d", "target_ref": "attack-pattern--f81933a4-bfe2-528f-94ef-399577e5a682" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--480f6a1d-b7a4-57ae-9e60-339087fb8048", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--47cc36df-bf8a-5d43-93d0-7683fb113351", "target_ref": "x-oak-tactic--a05710d6-773d-5671-81e6-1a9d53ce156a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--40868cae-05ec-528a-add9-090be7ce5f37", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--47cc36df-bf8a-5d43-93d0-7683fb113351", "target_ref": "attack-pattern--94a03321-bd42-5ba5-a14c-869236fb3822" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--39773d49-a193-5338-a082-e9dbf278aad4", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--47cc36df-bf8a-5d43-93d0-7683fb113351", "target_ref": "attack-pattern--92ca3ca4-e512-53c5-be45-1f8b05cc913b" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--64d6c254-c475-59be-a98a-e4ae028489cb", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--8c40f0bf-5128-5d1c-a360-5fba3c5cdf07", "target_ref": "attack-pattern--f5bce1e3-3637-56df-8db9-94e793306171" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d36fbaf4-99a8-56ef-8136-5cc33f4a0b3d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--8c40f0bf-5128-5d1c-a360-5fba3c5cdf07", "target_ref": "attack-pattern--f81933a4-bfe2-528f-94ef-399577e5a682" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--bfa45dc1-6b48-5bd3-903b-53b426711d9a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--67436aad-dba4-5ffd-9383-07bb1e4a0fdc", "target_ref": "attack-pattern--b19923a2-b45b-5106-935d-f52d0d875a94" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c517ac72-ffd7-5e9c-9238-fa7c1ed52598", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--67436aad-dba4-5ffd-9383-07bb1e4a0fdc", "target_ref": "attack-pattern--f81933a4-bfe2-528f-94ef-399577e5a682" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1726ba7f-8874-57fe-aac1-38975cee0228", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--67436aad-dba4-5ffd-9383-07bb1e4a0fdc", "target_ref": "attack-pattern--b6a77deb-14ae-59e3-b4b2-b73065972b6c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3a80796b-b754-59cc-a803-ea193f101ed3", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--bfdfbbc5-056d-5b8f-8b1e-83214db4944c", "target_ref": "x-oak-tactic--4a289ef4-441e-58b3-869d-49ccfdee57a4" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--61b33b28-c24e-53a1-b587-2ac29263f7a0", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--bfdfbbc5-056d-5b8f-8b1e-83214db4944c", "target_ref": "attack-pattern--473b0aa4-1cea-57d5-a0a1-9114ebeb1de6" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--efe803d0-d2e8-5ec9-86ef-c23308fe33f6", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--bfdfbbc5-056d-5b8f-8b1e-83214db4944c", "target_ref": "attack-pattern--b8d62a9c-14cd-503a-af8d-a26b825dffcd" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3d0621d7-af66-5e37-afab-817f62348de9", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--bfdfbbc5-056d-5b8f-8b1e-83214db4944c", "target_ref": "attack-pattern--cccae07c-951c-54bd-bfa4-af87de266370" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--448731d0-584d-5ef7-afa6-aafa8227f96d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--80a02103-a736-5251-8aab-17f991d1dba6", "target_ref": "attack-pattern--980e72bb-7127-51de-9870-d8a88edc74f8" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0df81ab0-8d20-590d-b496-c12264b7dc3e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--80a02103-a736-5251-8aab-17f991d1dba6", "target_ref": "x-oak-tactic--72fc0a09-f385-516c-82bb-a08b6fd3d57c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8bda9098-dc6e-523d-ae9b-e336628a5118", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--80a02103-a736-5251-8aab-17f991d1dba6", "target_ref": "attack-pattern--a55b5859-fa73-5cab-a342-82b97187ea20" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--57c7f567-9742-5e95-a936-e26158452664", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--80a02103-a736-5251-8aab-17f991d1dba6", "target_ref": "attack-pattern--b027592f-baee-5d2a-9d15-925aa1b77941" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5e0ab77d-c6a1-5abe-ba9c-73410d51bffa", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--80a02103-a736-5251-8aab-17f991d1dba6", "target_ref": "attack-pattern--e66a56f1-221e-5079-bfe4-99ccbe842a5a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--53f5c9dc-db9a-5f95-b573-de2d417bc542", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--80a02103-a736-5251-8aab-17f991d1dba6", "target_ref": "attack-pattern--f5bce1e3-3637-56df-8db9-94e793306171" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b8d35ae8-1038-5052-9f7e-22529429b842", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--fc8bca75-0079-5ce1-b9cc-136d32d48695", "target_ref": "attack-pattern--cf39fa63-9044-5279-8ea5-4acb64d53904" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9e8fc7c8-8154-5e07-bba2-e5fd83b661b4", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--fc8bca75-0079-5ce1-b9cc-136d32d48695", "target_ref": "attack-pattern--6cfeff7d-dc66-543b-b2f6-8e5e232156bc" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c33c3230-dc8a-57d3-ae41-895fde871204", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--242b01ad-749c-5300-8a06-d79475df8346", "target_ref": "attack-pattern--980e72bb-7127-51de-9870-d8a88edc74f8" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--aa9f91a8-9fd0-567e-bd92-ec4f4f4eeae7", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--242b01ad-749c-5300-8a06-d79475df8346", "target_ref": "attack-pattern--0658ea79-01b4-5c49-bb12-4c6e0876df4e" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--df2c999f-a4a3-5f38-bc99-51087c822b40", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--242b01ad-749c-5300-8a06-d79475df8346", "target_ref": "attack-pattern--846cf1ff-739a-5199-abd6-5f09cc1aeeb0" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8bbf4adf-fd05-54fb-8260-e64b672a81dd", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--242b01ad-749c-5300-8a06-d79475df8346", "target_ref": "attack-pattern--fe838439-8aa4-5b23-9494-fde9e1d5637c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f9cc8eee-fb54-5456-b399-a73cea208f7c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--242b01ad-749c-5300-8a06-d79475df8346", "target_ref": "attack-pattern--f5bce1e3-3637-56df-8db9-94e793306171" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d24145bb-b7bf-5e31-928e-5312153a5b16", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--e1105a10-1ab6-57b0-b10a-18d1fc49db49", "target_ref": "x-oak-tactic--4a289ef4-441e-58b3-869d-49ccfdee57a4" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--cf4c5d05-b055-59da-848b-91989bded62a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--e1105a10-1ab6-57b0-b10a-18d1fc49db49", "target_ref": "attack-pattern--d9e4a005-06a9-5cee-9f7c-234e20790118" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--977a1d2c-8f2a-57f6-b8b6-f58f97d14717", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--e1105a10-1ab6-57b0-b10a-18d1fc49db49", "target_ref": "attack-pattern--b6a77deb-14ae-59e3-b4b2-b73065972b6c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e866366e-20ae-57e9-bc31-7de30271be43", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--5d4341ed-51ad-508c-9881-7a979c9a62e0", "target_ref": "attack-pattern--32b4e82c-f2a6-5104-a99e-51eefa81695f" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3ff143aa-602d-5d9a-a90d-985ac6682fbe", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--5d4341ed-51ad-508c-9881-7a979c9a62e0", "target_ref": "attack-pattern--5deeb2fb-1df3-5566-8229-2e83bd241a08" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8042b2fa-ada2-5296-84d3-0921c0f20c71", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--5d4341ed-51ad-508c-9881-7a979c9a62e0", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2f148b5b-e1da-5840-8de8-994e9da50c0e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--6dc851e3-e0f2-52be-9924-da3846160d0d", "target_ref": "attack-pattern--ad24b94c-0c7f-5bac-bd56-cf837da9180b" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f3e754c7-dfc0-5365-8a3c-09ae98ab0ba8", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--6dc851e3-e0f2-52be-9924-da3846160d0d", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ebab3b3e-6f7a-5393-ba05-462eee42e3d5", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--6dc851e3-e0f2-52be-9924-da3846160d0d", "target_ref": "attack-pattern--b6a77deb-14ae-59e3-b4b2-b73065972b6c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5682cb9b-3f6a-56bd-85d6-f20d611f8cf5", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--6dc851e3-e0f2-52be-9924-da3846160d0d", "target_ref": "attack-pattern--9b65ffc8-0be6-5809-b228-a85033f790ba" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ea038e0b-3182-55af-8c1f-fc8904da13ca", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--2ce56ad5-fec7-594d-9cc1-33013de412c1", "target_ref": "attack-pattern--f81933a4-bfe2-528f-94ef-399577e5a682" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8ae49f41-7d7d-5282-af9d-3f2de302fd82", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--2ce56ad5-fec7-594d-9cc1-33013de412c1", "target_ref": "attack-pattern--9b65ffc8-0be6-5809-b228-a85033f790ba" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--07bad37d-2b3c-5cdb-95af-5a1f75a870c5", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--b8b55d63-70a9-5c01-8632-15caf08c9bdf", "target_ref": "attack-pattern--9b65ffc8-0be6-5809-b228-a85033f790ba" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--78362e4a-c837-5ee9-b7a7-fc7de16d4f41", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--b8b55d63-70a9-5c01-8632-15caf08c9bdf", "target_ref": "attack-pattern--df0b8ece-6ded-558d-9e29-22e289c4243b" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f5091af6-920e-5c57-8156-795870905216", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--e84c9322-98ac-5cf1-a261-81586611acc5", "target_ref": "x-oak-tactic--5fc49855-8bca-5500-b810-322019badf15" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--23e7b124-68b3-59c7-8c43-0c563b31b46d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--e84c9322-98ac-5cf1-a261-81586611acc5", "target_ref": "attack-pattern--f5bce1e3-3637-56df-8db9-94e793306171" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3df5a709-3c27-5c67-a251-dfb02ecb836d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--e84c9322-98ac-5cf1-a261-81586611acc5", "target_ref": "attack-pattern--f81933a4-bfe2-528f-94ef-399577e5a682" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--22089a85-6834-5b4a-8773-bb8b9b53d166", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--dbf072e3-ef64-56cf-9d79-0ae9589bfd9f", "target_ref": "attack-pattern--44a15cd3-db68-5127-b8dd-cb96e537e3b7" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--86605ad4-742c-5b66-b4c7-2828e1aa7edc", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--dbf072e3-ef64-56cf-9d79-0ae9589bfd9f", "target_ref": "attack-pattern--8a373cd0-d1fc-5d17-916d-993d5cd3e7c1" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--fc9531cf-0652-5eea-90a6-541b02805070", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--cbd4bb44-f33f-587c-9f7a-af1318514f15", "target_ref": "attack-pattern--32b4e82c-f2a6-5104-a99e-51eefa81695f" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c642ac3c-0b8e-5a25-bf46-fc824b7b5de6", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--cbd4bb44-f33f-587c-9f7a-af1318514f15", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8b91c91d-7dd8-52e5-8f7d-f9ab83aea7ff", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--cbd4bb44-f33f-587c-9f7a-af1318514f15", "target_ref": "attack-pattern--fd40fed2-9093-5b5a-8ebd-5b288e3ae6c5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9f883a74-0f84-5f11-b84c-be4c2dfd1780", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--2f90640f-21b6-542d-89f8-ffa547c82552", "target_ref": "attack-pattern--f7bfa62c-b23c-5fef-a74b-bca3b34cf4df" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d259bb33-4c01-5252-8313-02bc4eb60e44", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--2f90640f-21b6-542d-89f8-ffa547c82552", "target_ref": "attack-pattern--7ec6ff5b-83cd-5725-adda-2b5d3a846414" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9fff19cb-be90-5dc0-a630-b9305364c943", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--2f90640f-21b6-542d-89f8-ffa547c82552", "target_ref": "attack-pattern--92ca3ca4-e512-53c5-be45-1f8b05cc913b" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--aefdac8f-454b-5ef0-b935-a222de75abb8", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--c92f049b-e876-5f05-9caa-5ac83124a266", "target_ref": "attack-pattern--78f0aa7b-06b4-5266-b348-58db62932a71" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--adb43955-bc8b-5e8b-9b62-4005634af4d2", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--c92f049b-e876-5f05-9caa-5ac83124a266", "target_ref": "attack-pattern--7ec6ff5b-83cd-5725-adda-2b5d3a846414" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7366ced7-60df-5917-b9f5-0e74968b38cc", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--c92f049b-e876-5f05-9caa-5ac83124a266", "target_ref": "x-oak-tactic--7fa7f00b-059a-5a92-b145-0893b4530bb6" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2c8fe092-6c6b-5a78-b71b-f240021ffdd9", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--c92f049b-e876-5f05-9caa-5ac83124a266", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e2ae0730-cadb-5ca6-a0c2-6580e544da4d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--2700103e-679f-5334-9160-4969d5e07bc7", "target_ref": "attack-pattern--44a15cd3-db68-5127-b8dd-cb96e537e3b7" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0fd01a25-c63e-5e13-a27e-cbeed9e55e09", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--f9f511df-ef42-5222-8e8d-d0d376c321e1", "target_ref": "attack-pattern--9b65ffc8-0be6-5809-b228-a85033f790ba" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--29603918-437f-595a-b643-d5eef1aa2e95", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--d8555ae2-6787-5768-9e76-66c79bd40862", "target_ref": "attack-pattern--2a21b0c6-c06c-5130-9114-0d760dcb5b2c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9b38a0f5-67a2-5616-a780-c64660d5c598", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--d8555ae2-6787-5768-9e76-66c79bd40862", "target_ref": "attack-pattern--9552d7a9-3083-569f-a641-d880fc8a27d5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a4da7644-539e-52d6-b867-64919088cfac", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--e77919cd-d753-5948-954e-da85602f3e99", "target_ref": "attack-pattern--c5adc3a0-7ace-5a7f-b629-506415142209" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8a7c63c0-3419-564b-b00f-d0e4e0acfce8", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--e77919cd-d753-5948-954e-da85602f3e99", "target_ref": "attack-pattern--a019d6df-047d-5759-8cee-e8de54595ade" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5357d9a7-08de-55b7-998d-52b3ef43f962", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--e77919cd-d753-5948-954e-da85602f3e99", "target_ref": "attack-pattern--07314232-9e18-5d07-b8a6-6ce0ffec7200" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b2b302de-9ef9-561a-87cc-9ba3d4d92dcf", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--038a211b-7010-53d3-88f3-11db96897ab0", "target_ref": "x-oak-tactic--a05710d6-773d-5671-81e6-1a9d53ce156a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--02ab44b6-d249-5005-b310-5bc1320f87dd", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--038a211b-7010-53d3-88f3-11db96897ab0", "target_ref": "attack-pattern--94a03321-bd42-5ba5-a14c-869236fb3822" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c88dd579-2841-5902-8330-8d8106d5b25b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--038a211b-7010-53d3-88f3-11db96897ab0", "target_ref": "attack-pattern--92ca3ca4-e512-53c5-be45-1f8b05cc913b" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7289d150-2c55-55a4-a261-1e52cb3d182d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--6f110e9d-e34f-5312-bbae-d77be31d11bf", "target_ref": "attack-pattern--aebe2a72-a361-5ab4-8465-3a32a4dbd638" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--cc3613d5-797c-5dd4-9654-c42756866dde", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--d2ad1c21-7dd8-5f07-8bc1-40af7e897547", "target_ref": "x-oak-tactic--a05710d6-773d-5671-81e6-1a9d53ce156a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d8d34779-ac4f-5794-9b2c-3405395f2033", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--d2ad1c21-7dd8-5f07-8bc1-40af7e897547", "target_ref": "attack-pattern--052caee2-c494-51c7-87d3-0b5ae531eeb2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--dfbb0752-52e1-5e98-8d99-bffb4f146778", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--ccb2a0de-9c93-5deb-9d22-7de9d765ebff", "target_ref": "x-oak-tactic--a05710d6-773d-5671-81e6-1a9d53ce156a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--bbb81f90-627b-582e-be37-35072396d590", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--ccb2a0de-9c93-5deb-9d22-7de9d765ebff", "target_ref": "attack-pattern--052caee2-c494-51c7-87d3-0b5ae531eeb2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3200521b-6a68-5832-a921-26b68f52e800", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--ccb2a0de-9c93-5deb-9d22-7de9d765ebff", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--42400176-4385-510a-9e3a-e4ecbb136fe5", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--ce899b61-f3c1-50bd-b064-5c5176f89969", "target_ref": "attack-pattern--44a15cd3-db68-5127-b8dd-cb96e537e3b7" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--863a2485-78fc-5e6b-a982-72be82d8afec", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--ce899b61-f3c1-50bd-b064-5c5176f89969", "target_ref": "attack-pattern--4950a164-f5b6-579d-b44d-af445947d99e" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7f33511d-1ceb-589a-b84a-e87d6c65f6ec", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--8832aca6-b363-5c66-bd6f-3372663c8ad0", "target_ref": "attack-pattern--03407478-76ff-57d8-bf96-1cb5b5108d9d" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--37bcc725-f6de-5fe4-9d07-3f365bd2c2d8", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--8832aca6-b363-5c66-bd6f-3372663c8ad0", "target_ref": "attack-pattern--473b0aa4-1cea-57d5-a0a1-9114ebeb1de6" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d7695a67-7178-5749-bd26-fe8c98cc1f45", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--8832aca6-b363-5c66-bd6f-3372663c8ad0", "target_ref": "attack-pattern--cccae07c-951c-54bd-bfa4-af87de266370" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8be9c017-dc74-5ace-b2c1-700a95dea4b6", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--8832aca6-b363-5c66-bd6f-3372663c8ad0", "target_ref": "attack-pattern--bf6ef44d-fa93-5733-862a-26c1ac15a4b4" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1cec5d36-1795-531c-bed1-2a1be7fe3d49", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--8832aca6-b363-5c66-bd6f-3372663c8ad0", "target_ref": "attack-pattern--f5bce1e3-3637-56df-8db9-94e793306171" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--89cd1eac-9d7e-53d4-9f69-a9706284237d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--f22960d4-2fe1-5255-baf5-81da07924a0f", "target_ref": "attack-pattern--f81933a4-bfe2-528f-94ef-399577e5a682" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--329b69f0-5a79-5be0-b6ec-61ce6dd9ab1d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--f22960d4-2fe1-5255-baf5-81da07924a0f", "target_ref": "attack-pattern--1d4fc21d-4b26-53e8-a8fd-cef3f68b421d" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--19e1ae33-7e3b-5135-9780-0e7dc8e58fce", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--f6f5530a-8ac8-5dcd-8409-793a890865fb", "target_ref": "attack-pattern--2e0bf741-b432-58e7-8948-f5599bf0209e" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3bb3a947-ef2f-539c-a913-124a1e81a59f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--f6f5530a-8ac8-5dcd-8409-793a890865fb", "target_ref": "attack-pattern--9b65ffc8-0be6-5809-b228-a85033f790ba" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e1a8a3c4-1e4e-5afe-b648-d3a89801aa23", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--67a79f2e-46c4-5a56-9874-2b0cba04a369", "target_ref": "attack-pattern--7ec6ff5b-83cd-5725-adda-2b5d3a846414" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f7e60426-25b6-5a18-be1b-858ebd457f06", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--67a79f2e-46c4-5a56-9874-2b0cba04a369", "target_ref": "attack-pattern--9b65ffc8-0be6-5809-b228-a85033f790ba" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4267a67b-4240-5782-99c4-fe5b9defdf9a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--6ca6e8cf-552f-54b9-8ee4-fb6420da3c5e", "target_ref": "attack-pattern--f43b3cdc-ed19-5ad0-b661-706c665d9f83" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--21a92127-6c47-5d0d-bc24-a5b129cf7af7", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--6ca6e8cf-552f-54b9-8ee4-fb6420da3c5e", "target_ref": "attack-pattern--cccae07c-951c-54bd-bfa4-af87de266370" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--451a9ae8-896f-576a-bd4a-6fbf550626a9", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--fec2ffc1-fae3-59c8-8af7-a62dd5e6e36d", "target_ref": "attack-pattern--a4191d6c-02e1-5dae-aa08-2c4f908e10c5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d0e302b9-edbe-5b83-8b25-f0ba1d3507ea", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--f3bad0dd-7245-5125-ba87-16c5713dc4e8", "target_ref": "attack-pattern--1a600b6f-3cbd-5141-822e-9577e857e9ec" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--908b6935-3d99-590f-be32-10a6775b39bf", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--f3bad0dd-7245-5125-ba87-16c5713dc4e8", "target_ref": "attack-pattern--e66a56f1-221e-5079-bfe4-99ccbe842a5a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d62da976-ec2f-5bb7-99b4-2c0d4daf93fc", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--f3bad0dd-7245-5125-ba87-16c5713dc4e8", "target_ref": "attack-pattern--3be95af9-48b3-56a3-8e57-f07ac58e27f2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--35a5ba05-5486-5d2c-b179-9a94eeb75c34", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--3741fdc4-4085-5c57-af8d-b7121910563c", "target_ref": "attack-pattern--5deeb2fb-1df3-5566-8229-2e83bd241a08" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ef7223ba-ab40-5ed2-be8a-d851aaec3e09", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--3741fdc4-4085-5c57-af8d-b7121910563c", "target_ref": "attack-pattern--cccae07c-951c-54bd-bfa4-af87de266370" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--94a2fc1c-1039-575f-9fef-ae98abd8e3c4", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--e342c714-e499-58c4-b7ff-31b8489e4763", "target_ref": "attack-pattern--0fd4fcde-3464-5d2d-86ac-7c68035870a3" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--758fb313-75d9-58d3-8406-cdec878bfe1a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--e342c714-e499-58c4-b7ff-31b8489e4763", "target_ref": "attack-pattern--8ebc4ef1-736a-5a29-a376-a008444a2d2f" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--db1fb8d9-193f-5eac-b38f-983da7abb749", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--e342c714-e499-58c4-b7ff-31b8489e4763", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--52356f1c-02a3-57cb-9e3b-ee8be9448c61", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--e342c714-e499-58c4-b7ff-31b8489e4763", "target_ref": "attack-pattern--e69d7f82-fe18-5677-abba-9dd6347bc5a2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--bfc54116-ed64-5c07-98d0-32b4698730d1", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--b57d8c7a-ec0a-5231-90df-0b1a65682959", "target_ref": "attack-pattern--03a52b22-ed85-5ba7-9142-73d4e20f0c5a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--675e6a04-7082-5097-9391-886a025880a2", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--b57d8c7a-ec0a-5231-90df-0b1a65682959", "target_ref": "attack-pattern--7ec6ff5b-83cd-5725-adda-2b5d3a846414" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8a1184f5-fafd-55dc-a044-c48322866b3b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--e9985aa6-f6dd-5980-a6fe-d632659bc179", "target_ref": "attack-pattern--f474475e-47e9-57d5-b8d1-35077726b770" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--adc21069-0da9-50f5-b91f-7681a10832c1", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--e9985aa6-f6dd-5980-a6fe-d632659bc179", "target_ref": "attack-pattern--a7ebcbb2-dafe-5364-9932-e3d7bee02596" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--72b1ccc2-d912-5cf4-92a3-3e3205bf377c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--e9985aa6-f6dd-5980-a6fe-d632659bc179", "target_ref": "attack-pattern--bf6ef44d-fa93-5733-862a-26c1ac15a4b4" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--92d0c6fa-456c-5933-9f00-e01c2f1389cc", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--8743ea93-325f-5499-8188-dc72e621d881", "target_ref": "attack-pattern--b19923a2-b45b-5106-935d-f52d0d875a94" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--56edbe90-0336-54c7-9318-70cb42c883d7", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--8743ea93-325f-5499-8188-dc72e621d881", "target_ref": "attack-pattern--13ac496a-4463-5007-af2b-d6cc9503a3ac" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--dc1e6021-edc3-5499-a991-64f5f29f3fca", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--8743ea93-325f-5499-8188-dc72e621d881", "target_ref": "attack-pattern--f81933a4-bfe2-528f-94ef-399577e5a682" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b40b625e-30fd-5dce-92b1-2fa5b2ebe6c2", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--7dd221ef-2752-51d9-ae94-90bd97b18063", "target_ref": "attack-pattern--03407478-76ff-57d8-bf96-1cb5b5108d9d" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3908e3c0-7e93-56bb-9277-b9f5def8241a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--7dd221ef-2752-51d9-ae94-90bd97b18063", "target_ref": "attack-pattern--3065cec6-1624-5c76-a1a6-417a305ecec3" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--220191f0-53f6-58f3-a622-08b2bd91e41a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--7dd221ef-2752-51d9-ae94-90bd97b18063", "target_ref": "attack-pattern--f81933a4-bfe2-528f-94ef-399577e5a682" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--cf94416a-9b19-582c-9f5a-f52cf430d604", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--4a39b080-d284-5fba-84df-76d3cd4a5d5b", "target_ref": "attack-pattern--8a373cd0-d1fc-5d17-916d-993d5cd3e7c1" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--211c2ada-0e54-544b-8a76-8cb42cd4f689", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--ba44da4b-a3c2-5a3a-a332-6f4d9888b8bc", "target_ref": "attack-pattern--0658ea79-01b4-5c49-bb12-4c6e0876df4e" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--20a7930b-dafd-5d2b-8fa7-f2eb2851d7b0", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--ba44da4b-a3c2-5a3a-a332-6f4d9888b8bc", "target_ref": "attack-pattern--80d7913d-0db0-5316-b436-9d914dd8669b" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6a4fa530-6d1f-5107-946a-c06745c38e48", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--bdbf64b0-3053-5ac8-84c2-22f08a816833", "target_ref": "attack-pattern--980e72bb-7127-51de-9870-d8a88edc74f8" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--300efdbb-b8c9-5176-9a93-5bf5e14d7f21", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--bdbf64b0-3053-5ac8-84c2-22f08a816833", "target_ref": "attack-pattern--35ec0966-c5f8-584b-a05f-c614dec60791" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f4984c19-ffce-58cb-8bdc-51d192ccd944", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--6ffa2659-e4af-56f1-8f89-9143ef6c65c7", "target_ref": "attack-pattern--2e0bf741-b432-58e7-8948-f5599bf0209e" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1209a26e-c085-521e-bab8-54397540087e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--6ffa2659-e4af-56f1-8f89-9143ef6c65c7", "target_ref": "attack-pattern--a6cff4d8-210c-5f75-9fb5-0f3318e8f8c3" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ec1eee82-9a4a-568c-adb8-e82e6dc5cc7e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--6ffa2659-e4af-56f1-8f89-9143ef6c65c7", "target_ref": "attack-pattern--5deeb2fb-1df3-5566-8229-2e83bd241a08" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--71386f1d-a639-57a1-9ad4-a056deb99c7c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--6ffa2659-e4af-56f1-8f89-9143ef6c65c7", "target_ref": "attack-pattern--d9e4a005-06a9-5cee-9f7c-234e20790118" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--bd400de6-d41a-5838-8904-c6b687079a18", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--38745625-ef72-5f2f-842b-f58c9649b523", "target_ref": "attack-pattern--a6cff4d8-210c-5f75-9fb5-0f3318e8f8c3" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--92c38fed-e24e-52c3-9d04-d7c04190200a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--38745625-ef72-5f2f-842b-f58c9649b523", "target_ref": "attack-pattern--c61e4738-96bd-5980-be5f-a99ba4f12408" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c333a7f8-2b78-565a-985a-1f282c198027", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--38745625-ef72-5f2f-842b-f58c9649b523", "target_ref": "attack-pattern--71ecfc99-0efa-5c66-ad46-d0a4851cee1c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1f9e2ccf-55fb-53b3-b14c-007f62f3bf6d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--45b1ef51-6ff0-58fd-a859-1ffc7916b5fd", "target_ref": "attack-pattern--44a15cd3-db68-5127-b8dd-cb96e537e3b7" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--684b3b09-eaab-53f0-bfeb-cdf8698fe8fc", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--45b1ef51-6ff0-58fd-a859-1ffc7916b5fd", "target_ref": "attack-pattern--37433c31-ae6a-50f0-bfe3-22ac2f1747d9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--966dbc73-a8ca-5bca-915b-1e8c7dad5b13", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--1dce3175-135c-5cd8-a76b-206963214a9d", "target_ref": "attack-pattern--0de49898-b977-5cf7-9608-eff3285c50c7" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--815c41cc-6c61-58cb-960e-4dc35e74705c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--1dce3175-135c-5cd8-a76b-206963214a9d", "target_ref": "attack-pattern--052caee2-c494-51c7-87d3-0b5ae531eeb2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--19b70d78-633c-57d6-b4f4-1944a2510083", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--f531814f-73ed-5f1a-a1e3-48a54d3831fb", "target_ref": "attack-pattern--523b3321-6fd3-5d53-b04e-bbd114e8f317" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4df5f88e-9c67-5d31-a768-30d42ea7f25f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--f531814f-73ed-5f1a-a1e3-48a54d3831fb", "target_ref": "attack-pattern--ad24b94c-0c7f-5bac-bd56-cf837da9180b" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--bda9b050-be89-5794-96fa-b60a443a42b3", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--4fc28c59-ea2f-54c1-a7e1-69783be006f3", "target_ref": "attack-pattern--c61e4738-96bd-5980-be5f-a99ba4f12408" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d564651c-9356-52db-9525-7fabdfc8a5ff", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--4fc28c59-ea2f-54c1-a7e1-69783be006f3", "target_ref": "attack-pattern--9b65ffc8-0be6-5809-b228-a85033f790ba" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--fb510c45-84ca-5027-b546-2c366f5f23e5", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--7706ae47-079d-5f98-ac31-2a238493ed48", "target_ref": "attack-pattern--980e72bb-7127-51de-9870-d8a88edc74f8" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b210e970-50d5-592a-8238-5a52577dc500", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--7706ae47-079d-5f98-ac31-2a238493ed48", "target_ref": "attack-pattern--0658ea79-01b4-5c49-bb12-4c6e0876df4e" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8679fc56-1952-5b21-bc27-25174ae03866", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--7706ae47-079d-5f98-ac31-2a238493ed48", "target_ref": "attack-pattern--35ec0966-c5f8-584b-a05f-c614dec60791" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--93cf42df-a80b-5a8f-8e3e-6b0b4ce41f6c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--03a94469-81c4-58b2-bd89-95b0153d7f9c", "target_ref": "attack-pattern--b28eb96d-c303-5027-bc7d-413c3659495a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--09583e76-4672-51c5-bf49-4eb36191cd15", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--03a94469-81c4-58b2-bd89-95b0153d7f9c", "target_ref": "attack-pattern--c5adc3a0-7ace-5a7f-b629-506415142209" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f4f2f371-ee86-5f0b-9626-b24cbd5a5413", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--5e795d96-47b8-52ff-b1ce-0f7b2b17c027", "target_ref": "attack-pattern--8477975b-da56-555e-8bc4-de888d978403" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--145413dd-ea0f-5c04-b29c-35a60d230a03", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--5e795d96-47b8-52ff-b1ce-0f7b2b17c027", "target_ref": "attack-pattern--58002197-8183-530c-9eea-d2d8532a9008" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9d0dd9c8-8492-574f-8d46-10748875ec9d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--5e795d96-47b8-52ff-b1ce-0f7b2b17c027", "target_ref": "attack-pattern--12a37f6f-1b04-52d2-9ad3-56bca9ba3350" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--541c2b6e-0b5d-5ba2-bc26-0c5bf3a9f6d4", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--5e795d96-47b8-52ff-b1ce-0f7b2b17c027", "target_ref": "attack-pattern--92ca3ca4-e512-53c5-be45-1f8b05cc913b" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f21037e0-701e-511f-950d-aace72f3cec6", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--5e795d96-47b8-52ff-b1ce-0f7b2b17c027", "target_ref": "attack-pattern--eaa6f530-4f94-5ca6-b2d9-cbb9f56636a0" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2497e806-d5e3-580a-b14a-743c445a55ee", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--aceb09f4-1552-5add-8730-cbc8dd99159f", "target_ref": "attack-pattern--b28eb96d-c303-5027-bc7d-413c3659495a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1fa585e4-e88f-5bec-bcce-5c5d1f8afb4f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--aceb09f4-1552-5add-8730-cbc8dd99159f", "target_ref": "attack-pattern--c5adc3a0-7ace-5a7f-b629-506415142209" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--10bb4c9f-cc03-5036-b974-e1ca885b2381", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--71802f59-2e39-5a8f-b051-82281f38ccfc", "target_ref": "attack-pattern--b28eb96d-c303-5027-bc7d-413c3659495a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--28106d54-d08a-54c4-be3e-11a0fd1917d2", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--71802f59-2e39-5a8f-b051-82281f38ccfc", "target_ref": "attack-pattern--c5adc3a0-7ace-5a7f-b629-506415142209" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a54f0905-2bb8-5ba0-b1b9-8a34afa9d754", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--d27ab417-d380-5956-98f6-b031de44abc5", "target_ref": "attack-pattern--888de015-81a7-52ec-9832-87baca164029" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--cebab6c0-f3f7-58c2-a35e-397e153f9fed", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--d27ab417-d380-5956-98f6-b031de44abc5", "target_ref": "attack-pattern--a4191d6c-02e1-5dae-aa08-2c4f908e10c5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--98102443-ce7a-57a3-83bd-9d6ff38d795c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--a6ce8272-4d19-5d0c-8004-dbe2050c3a1a", "target_ref": "attack-pattern--44a15cd3-db68-5127-b8dd-cb96e537e3b7" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e539ef30-2720-5481-a812-e28fddc2e50b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--a6ce8272-4d19-5d0c-8004-dbe2050c3a1a", "target_ref": "attack-pattern--8a373cd0-d1fc-5d17-916d-993d5cd3e7c1" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6a5bc114-78ef-532b-8a5b-c1620584a8c1", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--7f2bf8cd-8a10-5bd6-bcac-95f3e8f017b0", "target_ref": "attack-pattern--0fd4fcde-3464-5d2d-86ac-7c68035870a3" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--913b2f60-c291-56fd-98bd-de12fe80e211", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--7f2bf8cd-8a10-5bd6-bcac-95f3e8f017b0", "target_ref": "attack-pattern--19b22847-2104-5eb9-a74c-4e7ef6195ab8" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--43f058f9-aefb-5d5a-9de8-e8066c494a2a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--f27440d7-3a0c-552a-b00d-d3fe6b84c843", "target_ref": "attack-pattern--df0b8ece-6ded-558d-9e29-22e289c4243b" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ec7e0c91-e8d7-579d-b75d-d0fde712cbdc", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--f27440d7-3a0c-552a-b00d-d3fe6b84c843", "target_ref": "attack-pattern--3a083d84-7478-5068-afe8-ad797d870993" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d61bc091-6061-5f7d-8913-37aede3b4379", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--f27440d7-3a0c-552a-b00d-d3fe6b84c843", "target_ref": "attack-pattern--1d4fc21d-4b26-53e8-a8fd-cef3f68b421d" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d2acc607-30d7-5622-b6aa-c6ef95750ab1", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--3f4d5329-a47d-5fed-a278-a61d2b251d9d", "target_ref": "attack-pattern--a7929123-b1d5-5eee-b042-dc7812bdd713" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e61b82d5-6fa8-5ad3-8062-370af7141a20", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--3f4d5329-a47d-5fed-a278-a61d2b251d9d", "target_ref": "attack-pattern--03a52b22-ed85-5ba7-9142-73d4e20f0c5a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--124a5d89-cb93-5612-beed-ccfe0095910d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--3f4d5329-a47d-5fed-a278-a61d2b251d9d", "target_ref": "attack-pattern--75d94806-bc98-57dc-894c-8ba499eb5540" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1481ea18-3804-57ae-a72c-1fccaba14384", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--b6a7d003-e988-5f34-85b2-678ede161426", "target_ref": "attack-pattern--8a373cd0-d1fc-5d17-916d-993d5cd3e7c1" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2e66b181-2bea-539f-bafb-103ae57aef09", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--b6a7d003-e988-5f34-85b2-678ede161426", "target_ref": "attack-pattern--fccf2600-ec82-53d1-b3ba-0384a28f8be3" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--48b89c12-5311-5ca5-b58f-289f3011e871", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--7729d607-4174-5216-9d06-9b7a7f396952", "target_ref": "attack-pattern--b28eb96d-c303-5027-bc7d-413c3659495a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7866f63e-bbca-5785-9e1f-cc1025b185ef", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--7729d607-4174-5216-9d06-9b7a7f396952", "target_ref": "attack-pattern--c5adc3a0-7ace-5a7f-b629-506415142209" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--06099017-5ca1-577d-8637-2b3545245d81", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--f72d17f8-727b-57fa-8d75-fbd220f7fad8", "target_ref": "attack-pattern--e69d7f82-fe18-5677-abba-9dd6347bc5a2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8458e223-3692-5c9f-9030-437266c4a156", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--f72d17f8-727b-57fa-8d75-fbd220f7fad8", "target_ref": "attack-pattern--a7ebcbb2-dafe-5364-9932-e3d7bee02596" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8443a8da-3cf7-5fbe-b098-fedd2a76aefb", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--f72d17f8-727b-57fa-8d75-fbd220f7fad8", "target_ref": "attack-pattern--28abf537-2707-58ba-99aa-5a6cef69eb87" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c2fe6453-4eb1-567e-9807-44194a7ff0a0", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--c9a2ace6-a057-5a33-94d7-37dfec37e60a", "target_ref": "attack-pattern--980e72bb-7127-51de-9870-d8a88edc74f8" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3e55a376-f976-5a2e-b6a8-307e71737dd4", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--c9a2ace6-a057-5a33-94d7-37dfec37e60a", "target_ref": "attack-pattern--c5adc3a0-7ace-5a7f-b629-506415142209" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--12ae54ca-9d92-5279-b21e-292048845992", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--c9a2ace6-a057-5a33-94d7-37dfec37e60a", "target_ref": "attack-pattern--35ec0966-c5f8-584b-a05f-c614dec60791" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9ad78457-4175-5d0e-937c-bd27cf156380", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--d7bd1e7b-4548-5588-83cf-5e4397d615f4", "target_ref": "x-oak-tactic--5fc49855-8bca-5500-b810-322019badf15" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--dd507156-7d84-5642-b472-9ac8cf89afea", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--d7bd1e7b-4548-5588-83cf-5e4397d615f4", "target_ref": "attack-pattern--fccf2600-ec82-53d1-b3ba-0384a28f8be3" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--10c1c924-51d9-5b8c-959f-baa44d2774e7", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--edd662aa-44f1-5f6a-a364-5e02647634ac", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--84fe77ec-5641-5f48-bcde-a457b9372a7d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--edd662aa-44f1-5f6a-a364-5e02647634ac", "target_ref": "attack-pattern--a508cca2-dfea-5831-9bd5-f7d69abe422b" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--eef1e2ee-7218-5cfa-8d88-36abb5458458", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--06b4da57-f86a-5b6b-acc5-e801235ffd0b", "target_ref": "attack-pattern--fccf2600-ec82-53d1-b3ba-0384a28f8be3" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--58ccc82f-4c7f-59f4-a24e-5701982ad002", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--6a748289-55a7-511f-abf0-14facedb5daf", "target_ref": "attack-pattern--f7bfa62c-b23c-5fef-a74b-bca3b34cf4df" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--705a02b6-747b-5b1d-83ec-bb70deb19653", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--3f9ca81a-6e4e-5079-a643-486cef00457f", "target_ref": "attack-pattern--888de015-81a7-52ec-9832-87baca164029" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--79b4a7cc-a5b4-5fc8-849b-0021dfafb3c8", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--3f9ca81a-6e4e-5079-a643-486cef00457f", "target_ref": "attack-pattern--ea13efc1-d0df-532c-8add-3d39dcd29713" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--041c8dcc-0cd3-5b96-81af-4626de41bf24", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--3f9ca81a-6e4e-5079-a643-486cef00457f", "target_ref": "attack-pattern--a33bad38-8e4f-5cdd-a0a4-779143c81d8d" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5337410a-5832-5f90-99a3-0e845a772c66", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--f2271c2c-bc9a-595f-9ba8-b1663b42fb08", "target_ref": "attack-pattern--fe838439-8aa4-5b23-9494-fde9e1d5637c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--84275e30-aa07-5ad5-876e-0602a832e0ba", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--f2271c2c-bc9a-595f-9ba8-b1663b42fb08", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--217aff1a-2bb5-5ace-abc0-34f821936e9f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--f2271c2c-bc9a-595f-9ba8-b1663b42fb08", "target_ref": "attack-pattern--f5bce1e3-3637-56df-8db9-94e793306171" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e61489b6-73ef-55fa-bc40-7e5780fb1efd", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--f2271c2c-bc9a-595f-9ba8-b1663b42fb08", "target_ref": "attack-pattern--f81933a4-bfe2-528f-94ef-399577e5a682" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6e8b68e5-ff39-5690-916b-ba0c2c9c0bb1", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--405cfb77-e410-5160-9c44-8300f16c565a", "target_ref": "attack-pattern--aa324a54-0e77-513e-bc77-dea4683702d2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--fff7edf4-6259-54a2-809a-a120849c3282", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--405cfb77-e410-5160-9c44-8300f16c565a", "target_ref": "attack-pattern--5deeb2fb-1df3-5566-8229-2e83bd241a08" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--24c98032-18e0-5111-874b-24f50d26e6a4", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--e904f9cd-4cba-5117-928f-fdca9391ffb0", "target_ref": "attack-pattern--51de129b-35c6-52ab-baa1-4952b944dad8" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--68b3b7eb-2a45-539f-b52c-79877799e624", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--5a58cfa5-ea51-5b39-a6c9-47044996c901", "target_ref": "attack-pattern--f7bfa62c-b23c-5fef-a74b-bca3b34cf4df" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f1aa1f2b-f17d-51c1-91a4-8594e6908d87", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--25af6662-d356-5de0-a192-0dbef1921fed", "target_ref": "attack-pattern--f81933a4-bfe2-528f-94ef-399577e5a682" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--90f02795-b314-5ee9-933e-1a7962a780dc", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--25af6662-d356-5de0-a192-0dbef1921fed", "target_ref": "attack-pattern--50650ed5-e07d-5fe8-9adf-7adb33f8182e" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7ca1e8e9-d10a-5021-adb2-362d1a15adf9", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--3a9d0551-6b53-5185-9100-4613fd0b5c75", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--bfcf6e0c-2b5f-59a6-a973-6c8915a072c9", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--3a9d0551-6b53-5185-9100-4613fd0b5c75", "target_ref": "attack-pattern--f81933a4-bfe2-528f-94ef-399577e5a682" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2286036a-ccb0-5e57-9c6d-1f82377eb33c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--3a9d0551-6b53-5185-9100-4613fd0b5c75", "target_ref": "attack-pattern--50650ed5-e07d-5fe8-9adf-7adb33f8182e" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--dfdec58e-806f-56d0-9846-e67e7879ef47", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--14c72208-b20a-5615-a7a1-c6a053f7c45c", "target_ref": "attack-pattern--f81933a4-bfe2-528f-94ef-399577e5a682" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--49dab4b2-1a39-5dcf-918c-0d028222671f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--14c72208-b20a-5615-a7a1-c6a053f7c45c", "target_ref": "attack-pattern--50650ed5-e07d-5fe8-9adf-7adb33f8182e" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e27230b0-0974-5581-adc1-94fb55a7bbf4", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--d02254a7-b701-55e0-ab8b-a015802f8635", "target_ref": "attack-pattern--51de129b-35c6-52ab-baa1-4952b944dad8" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b1dd77b6-bc7d-54bd-866a-e5d329d7a203", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--d02254a7-b701-55e0-ab8b-a015802f8635", "target_ref": "attack-pattern--f5bce1e3-3637-56df-8db9-94e793306171" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--43cb600c-f33e-5740-b403-ff374c5c612c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--d02254a7-b701-55e0-ab8b-a015802f8635", "target_ref": "attack-pattern--f81933a4-bfe2-528f-94ef-399577e5a682" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2b2a175d-4be2-55d2-8024-befb2378abc0", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--f46ef9cc-8f64-57cd-93c7-8c552a0f2ae2", "target_ref": "attack-pattern--980e72bb-7127-51de-9870-d8a88edc74f8" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8fd281dd-3e36-59ac-afbd-bc0d01691bf8", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--86909fd0-c486-5cd2-ad49-95770982dd1b", "target_ref": "attack-pattern--f5bce1e3-3637-56df-8db9-94e793306171" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--28f75ef1-27f1-57c1-bd2e-2539d8bdc7a8", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--86909fd0-c486-5cd2-ad49-95770982dd1b", "target_ref": "attack-pattern--f81933a4-bfe2-528f-94ef-399577e5a682" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--87b365c3-1340-5e1f-a51b-4bcaa9ba429f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--ef1b1868-c641-5142-a304-440cc68d6e58", "target_ref": "attack-pattern--03407478-76ff-57d8-bf96-1cb5b5108d9d" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--62f85aba-0025-5547-ac4c-800e6567467c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--4a74e566-4f86-596e-b698-acfb368f18fb", "target_ref": "attack-pattern--f81933a4-bfe2-528f-94ef-399577e5a682" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--cdbbb793-5d72-55b2-8433-5c747d372ca9", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--4a74e566-4f86-596e-b698-acfb368f18fb", "target_ref": "attack-pattern--fd40fed2-9093-5b5a-8ebd-5b288e3ae6c5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7cd48636-ae71-5021-84dd-a08b99ab3f18", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--4a74e566-4f86-596e-b698-acfb368f18fb", "target_ref": "attack-pattern--1d4fc21d-4b26-53e8-a8fd-cef3f68b421d" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--91d24e60-3991-53b1-b2ba-eff8a6a380fd", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--31c1c983-aba3-5320-9dbf-d7c3b0a266b6", "target_ref": "attack-pattern--0658ea79-01b4-5c49-bb12-4c6e0876df4e" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--76ee7f1c-aa2e-55b0-944b-4d7dabb4c081", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--11e7b5ad-1bf0-519b-a20e-892cd0da823c", "target_ref": "x-oak-tactic--a05710d6-773d-5671-81e6-1a9d53ce156a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--bd7f5455-4e06-51ae-838f-08a0b91e9c39", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--11e7b5ad-1bf0-519b-a20e-892cd0da823c", "target_ref": "x-oak-tactic--7fa7f00b-059a-5a92-b145-0893b4530bb6" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--cfdc1210-be49-5c81-8d69-2fe9f8c4d961", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--11e7b5ad-1bf0-519b-a20e-892cd0da823c", "target_ref": "attack-pattern--a019d6df-047d-5759-8cee-e8de54595ade" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f65be455-8d95-5966-9d50-c4483a48b934", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--b695a865-0dbd-59e3-b17c-3d4c750f7c41", "target_ref": "attack-pattern--473b0aa4-1cea-57d5-a0a1-9114ebeb1de6" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--499722c9-aca3-5fb0-ab1b-9ed5507ca8e5", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--b695a865-0dbd-59e3-b17c-3d4c750f7c41", "target_ref": "attack-pattern--3419f870-c58f-5b87-b67d-829b01e4d724" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2d522914-5849-5da3-9449-00faf8eeaef6", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--b695a865-0dbd-59e3-b17c-3d4c750f7c41", "target_ref": "attack-pattern--bf6ef44d-fa93-5733-862a-26c1ac15a4b4" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c516ee6b-f707-5b2f-9ce5-812c0d2e3db2", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--efc8d88b-99e5-582c-9e96-e3f3a109c378", "target_ref": "attack-pattern--03407478-76ff-57d8-bf96-1cb5b5108d9d" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f44352bb-a6c8-514c-8e01-8ef3de861b1b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--efc8d88b-99e5-582c-9e96-e3f3a109c378", "target_ref": "attack-pattern--3065cec6-1624-5c76-a1a6-417a305ecec3" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--cf466e15-a793-5895-bee4-5cf97fc12e8e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--efc8d88b-99e5-582c-9e96-e3f3a109c378", "target_ref": "attack-pattern--b027592f-baee-5d2a-9d15-925aa1b77941" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--de2a614c-8e06-5a08-9c50-9fdf4e76a42d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--efc8d88b-99e5-582c-9e96-e3f3a109c378", "target_ref": "attack-pattern--bf6ef44d-fa93-5733-862a-26c1ac15a4b4" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--32704735-6030-514d-9c3e-ccba830b8cf0", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--66e530d7-c207-56db-916e-c845cb20e460", "target_ref": "attack-pattern--ad24b94c-0c7f-5bac-bd56-cf837da9180b" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--07a84d68-8342-5f78-995d-8f2de2d49baf", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--66e530d7-c207-56db-916e-c845cb20e460", "target_ref": "attack-pattern--b6a77deb-14ae-59e3-b4b2-b73065972b6c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f97ebc1c-f166-58bb-8e0f-536529c39341", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--66e530d7-c207-56db-916e-c845cb20e460", "target_ref": "attack-pattern--9b65ffc8-0be6-5809-b228-a85033f790ba" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2dc61caa-f208-5d2a-9d65-913450770986", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--a213a5e7-cffb-584e-aa10-8eab91a25b4b", "target_ref": "attack-pattern--9552d7a9-3083-569f-a641-d880fc8a27d5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f9ed9ae7-c549-5259-b1b7-83eefb607a15", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--a213a5e7-cffb-584e-aa10-8eab91a25b4b", "target_ref": "attack-pattern--f0e70cea-8e64-51c4-9f64-09ea2bf642aa" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f497e34f-b89a-52c2-ad9c-0556d2a00349", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--a213a5e7-cffb-584e-aa10-8eab91a25b4b", "target_ref": "attack-pattern--58002197-8183-530c-9eea-d2d8532a9008" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7fb60a2f-8457-5db8-b338-1cded7955114", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--a213a5e7-cffb-584e-aa10-8eab91a25b4b", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9e139805-da95-57ce-9eb7-ec2e93fb5f61", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--a213a5e7-cffb-584e-aa10-8eab91a25b4b", "target_ref": "attack-pattern--e69d7f82-fe18-5677-abba-9dd6347bc5a2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--64447fe9-5e3f-5715-8c5d-4f921a5e4109", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--e74ac396-8519-5e39-be00-9f6341bc04ad", "target_ref": "attack-pattern--aa324a54-0e77-513e-bc77-dea4683702d2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f797559e-fff6-5d54-acbf-0c371026608b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--e74ac396-8519-5e39-be00-9f6341bc04ad", "target_ref": "attack-pattern--a55b5859-fa73-5cab-a342-82b97187ea20" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--aea81788-8e30-529b-8ac8-623d8c42a282", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--e74ac396-8519-5e39-be00-9f6341bc04ad", "target_ref": "attack-pattern--5deeb2fb-1df3-5566-8229-2e83bd241a08" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c56b38d6-c4f6-593d-b74b-338989184fc0", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--e74ac396-8519-5e39-be00-9f6341bc04ad", "target_ref": "attack-pattern--d9e4a005-06a9-5cee-9f7c-234e20790118" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--df62da3e-84e0-5a02-b2d4-f70f324887ce", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--e74ac396-8519-5e39-be00-9f6341bc04ad", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a58de777-1d84-5f7d-a8b7-c8f4376a6d92", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--3eb36bc1-589c-5943-aee8-5ad7e3ddcb3f", "target_ref": "attack-pattern--f474475e-47e9-57d5-b8d1-35077726b770" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5a58b68a-477a-57d7-85e0-cc3a0fe42358", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--3eb36bc1-589c-5943-aee8-5ad7e3ddcb3f", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--51daf9df-c0bc-5cc1-ba8a-9865da1ccf89", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--3eb36bc1-589c-5943-aee8-5ad7e3ddcb3f", "target_ref": "attack-pattern--e69d7f82-fe18-5677-abba-9dd6347bc5a2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e4ce547a-c1df-5ec2-8aba-31c03b0932b8", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--3eb36bc1-589c-5943-aee8-5ad7e3ddcb3f", "target_ref": "attack-pattern--bf6ef44d-fa93-5733-862a-26c1ac15a4b4" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c7e02cb5-fad6-5176-83a3-beae4cf6b97c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--04cd0d07-b8af-5bce-927d-c2d8a4dd9f59", "target_ref": "attack-pattern--2a21b0c6-c06c-5130-9114-0d760dcb5b2c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--94287e18-c5a5-52c2-9ea3-9c7340cc9e23", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--04cd0d07-b8af-5bce-927d-c2d8a4dd9f59", "target_ref": "attack-pattern--77b517cc-4b13-5a1b-8262-fb171254ddb5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5cae9607-3a20-52ef-87cb-339d175cb08e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--183f1f80-a783-530f-8f78-65fca095421b", "target_ref": "attack-pattern--e69d7f82-fe18-5677-abba-9dd6347bc5a2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9f636021-cb2e-59bc-871a-2712611b6e0a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--183f1f80-a783-530f-8f78-65fca095421b", "target_ref": "attack-pattern--f5bce1e3-3637-56df-8db9-94e793306171" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9d1068f9-c33e-5048-a518-fe37d599d150", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--ef04d57b-3119-5dce-b63d-38cddd730917", "target_ref": "attack-pattern--fd40fed2-9093-5b5a-8ebd-5b288e3ae6c5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--09c7097d-0a82-57fc-babd-6e98d7c5cb01", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--8a8957fd-e157-51c1-82cf-5db427e78930", "target_ref": "attack-pattern--cf39fa63-9044-5279-8ea5-4acb64d53904" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f574c82a-2900-51ec-a16d-cf3f8e06845b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--8a8957fd-e157-51c1-82cf-5db427e78930", "target_ref": "attack-pattern--4950a164-f5b6-579d-b44d-af445947d99e" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--89166361-20ea-5702-a447-5847a5f5ac9f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--8a8957fd-e157-51c1-82cf-5db427e78930", "target_ref": "attack-pattern--6cfeff7d-dc66-543b-b2f6-8e5e232156bc" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--dffc3409-d753-56ef-8f82-5e03f6f5ef9d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--b402fc0b-914f-5617-a438-f64d6e39c7da", "target_ref": "attack-pattern--cf39fa63-9044-5279-8ea5-4acb64d53904" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3baa7528-8d7a-5fed-aad0-1777328fa604", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--b402fc0b-914f-5617-a438-f64d6e39c7da", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b5f9e31d-27bf-5de7-b70d-1e9dadf466cb", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--b402fc0b-914f-5617-a438-f64d6e39c7da", "target_ref": "attack-pattern--093e472c-281c-5e78-9228-486255d3058a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--00a5f2ee-17c3-54f9-8302-8733fe481295", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--75732954-c901-5af0-a932-59a2fd7685ff", "target_ref": "attack-pattern--f81933a4-bfe2-528f-94ef-399577e5a682" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e6fccaff-1dcd-5a9d-a0ea-ace671e05e14", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--75732954-c901-5af0-a932-59a2fd7685ff", "target_ref": "attack-pattern--fd40fed2-9093-5b5a-8ebd-5b288e3ae6c5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--475f1bd4-d8c0-551e-af7e-e886b662a543", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--c097fcc1-4ee6-55e2-a919-69454dd8b881", "target_ref": "attack-pattern--50650ed5-e07d-5fe8-9adf-7adb33f8182e" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5f091d0f-ac5a-5cae-a8b7-f79661773a00", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--2f95685b-4af2-5253-958a-0a2c398519a3", "target_ref": "attack-pattern--9b65ffc8-0be6-5809-b228-a85033f790ba" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--66c19ffb-5e61-522f-8ecd-f882136831ca", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--2f95685b-4af2-5253-958a-0a2c398519a3", "target_ref": "attack-pattern--fd40fed2-9093-5b5a-8ebd-5b288e3ae6c5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--bb53f2ac-ab0b-5074-b222-3c746fa5fead", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--831d31c2-2a72-5f5f-bd92-1a500a292ccf", "target_ref": "attack-pattern--aa324a54-0e77-513e-bc77-dea4683702d2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--19ef979e-8206-54f4-b70f-70dbb62d6164", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--831d31c2-2a72-5f5f-bd92-1a500a292ccf", "target_ref": "attack-pattern--a55b5859-fa73-5cab-a342-82b97187ea20" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--49d452c0-5f93-5957-bf3a-ef949f3ea35c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--831d31c2-2a72-5f5f-bd92-1a500a292ccf", "target_ref": "attack-pattern--5deeb2fb-1df3-5566-8229-2e83bd241a08" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--79d95ee5-8839-5701-bfdc-ae6cb9acc53d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--831d31c2-2a72-5f5f-bd92-1a500a292ccf", "target_ref": "attack-pattern--f5bce1e3-3637-56df-8db9-94e793306171" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--372e0f03-0b70-520d-bb6c-15cf7779903f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--2ea56eb4-c466-5931-a71b-36626f9e3511", "target_ref": "attack-pattern--052caee2-c494-51c7-87d3-0b5ae531eeb2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--67fa90a4-3bc9-5652-a704-d719fcf743bb", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--2ea56eb4-c466-5931-a71b-36626f9e3511", "target_ref": "attack-pattern--5deeb2fb-1df3-5566-8229-2e83bd241a08" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--56fece72-4e1d-5a21-9c40-84fa8d4a534e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--75f87d55-c402-591b-9d24-974be1d840bd", "target_ref": "attack-pattern--a4191d6c-02e1-5dae-aa08-2c4f908e10c5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5aff46df-23bb-5635-b768-ec883c3460b1", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--1a59e7ab-0da1-5a30-bf5e-c47fc82bfb50", "target_ref": "attack-pattern--1a600b6f-3cbd-5141-822e-9577e857e9ec" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7def0395-c87a-52bd-9c52-ddeb8b463444", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--1a59e7ab-0da1-5a30-bf5e-c47fc82bfb50", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--82ccc918-8404-5d8e-8d9a-61ac05f04655", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--1a59e7ab-0da1-5a30-bf5e-c47fc82bfb50", "target_ref": "attack-pattern--9b65ffc8-0be6-5809-b228-a85033f790ba" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c9bad0af-52bc-5e4e-b720-c3690347c7ee", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--62d7e0e5-d172-5b21-9045-2339a1e89814", "target_ref": "attack-pattern--a7929123-b1d5-5eee-b042-dc7812bdd713" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--75211305-f8d9-5c38-92d1-599775a9e502", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--efb2f7df-cb49-500f-a114-93952eb70ca2", "target_ref": "attack-pattern--f5bce1e3-3637-56df-8db9-94e793306171" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--11847730-b38f-559f-923c-2b9ca165fca8", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--efb2f7df-cb49-500f-a114-93952eb70ca2", "target_ref": "attack-pattern--f81933a4-bfe2-528f-94ef-399577e5a682" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ddf57d1f-514a-5e44-b3fd-d8ec85146f5e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--8d4aca46-f96b-5437-83c3-07fa4f185b52", "target_ref": "attack-pattern--f474475e-47e9-57d5-b8d1-35077726b770" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--fa2a9613-ddb1-5a21-85f5-8b8170d9049e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--8d4aca46-f96b-5437-83c3-07fa4f185b52", "target_ref": "attack-pattern--e69d7f82-fe18-5677-abba-9dd6347bc5a2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4c746e16-c224-546d-a981-d9d33cebeb66", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--8d4aca46-f96b-5437-83c3-07fa4f185b52", "target_ref": "attack-pattern--bf6ef44d-fa93-5733-862a-26c1ac15a4b4" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--cfbc239d-e7a4-5e7c-9f76-aa329a9c534e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--3999554e-9aba-5a58-990e-6dce0992293c", "target_ref": "attack-pattern--f474475e-47e9-57d5-b8d1-35077726b770" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a1cf6530-b270-581a-8500-4fec63786ae6", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--4009f089-2779-57db-9616-e8da18dda2f4", "target_ref": "attack-pattern--2a21b0c6-c06c-5130-9114-0d760dcb5b2c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e0e69138-7f5c-5982-912a-0a1e5747ee0d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--4009f089-2779-57db-9616-e8da18dda2f4", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--44bd4885-ab43-5565-b8bb-0d6b600bdfd7", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--028d1045-820b-5634-993c-1d5c227cf25e", "target_ref": "x-oak-tactic--a05710d6-773d-5671-81e6-1a9d53ce156a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--81c1b122-f819-5705-aaca-e2ef281785c0", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--028d1045-820b-5634-993c-1d5c227cf25e", "target_ref": "attack-pattern--f43b3cdc-ed19-5ad0-b661-706c665d9f83" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--bcac928e-2819-551c-8ab7-70598ff80857", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--028d1045-820b-5634-993c-1d5c227cf25e", "target_ref": "attack-pattern--6d6dfb01-6c40-58c3-ac5a-98b6042866bd" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f8b46f02-8adf-5491-8508-3085ce414e38", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--028d1045-820b-5634-993c-1d5c227cf25e", "target_ref": "x-oak-tactic--805d835b-8d16-5215-ab2a-a5a008681adb" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--bafee7de-fb4b-5d6e-ad4c-ddf99b51580b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--314fdac3-8817-5897-a586-d864d7afbe68", "target_ref": "attack-pattern--f474475e-47e9-57d5-b8d1-35077726b770" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b978a227-d57b-5d7d-a0ee-8393b7f576b4", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--314fdac3-8817-5897-a586-d864d7afbe68", "target_ref": "attack-pattern--bf6ef44d-fa93-5733-862a-26c1ac15a4b4" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--41233a79-f68d-5794-a6cb-8a0422aab00e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--314fdac3-8817-5897-a586-d864d7afbe68", "target_ref": "attack-pattern--1d0e4f47-8c77-58a2-b885-f44145ed3bf4" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4b2ed7bd-dd0c-5d32-b819-46b1589158e6", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--750b7795-8736-5687-a245-9e34fd4aded9", "target_ref": "attack-pattern--2a21b0c6-c06c-5130-9114-0d760dcb5b2c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a536f7f9-5a53-52f7-8c10-4b1d261c0ec0", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--750b7795-8736-5687-a245-9e34fd4aded9", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7fd28df3-1247-582e-b34d-f9d1cb99be9e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--7a656a00-f025-5ce9-9aed-c178ca0bc8ee", "target_ref": "attack-pattern--03407478-76ff-57d8-bf96-1cb5b5108d9d" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--11d72d7d-dda2-5e64-8ea1-6858577d98e7", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--7a656a00-f025-5ce9-9aed-c178ca0bc8ee", "target_ref": "attack-pattern--cccae07c-951c-54bd-bfa4-af87de266370" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5bb03248-560f-5d7c-bd03-7b61ebf5dd22", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--7a656a00-f025-5ce9-9aed-c178ca0bc8ee", "target_ref": "attack-pattern--b6a77deb-14ae-59e3-b4b2-b73065972b6c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--37c7a3f2-29ea-510f-8ee5-daf651a9c649", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--279af5b5-5ac8-577f-9c0b-39bfd9554846", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--de6b72df-0497-5a0b-a83f-65adaec8cbcd", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--279af5b5-5ac8-577f-9c0b-39bfd9554846", "target_ref": "attack-pattern--093e472c-281c-5e78-9228-486255d3058a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1d0d4f2e-183c-5bcc-8643-2d7db7987671", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--279af5b5-5ac8-577f-9c0b-39bfd9554846", "target_ref": "attack-pattern--bf6ef44d-fa93-5733-862a-26c1ac15a4b4" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--41ee1ffd-2096-5030-867f-a7bd467b9dc7", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--85a3ebaa-78ef-5d4d-9970-adebe7f0af34", "target_ref": "attack-pattern--0fd4fcde-3464-5d2d-86ac-7c68035870a3" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6962773d-41fd-5b9c-8928-752e1e1ac56e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--85a3ebaa-78ef-5d4d-9970-adebe7f0af34", "target_ref": "attack-pattern--8ebc4ef1-736a-5a29-a376-a008444a2d2f" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d25850cf-34df-556a-a226-4276eb4b3749", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--85a3ebaa-78ef-5d4d-9970-adebe7f0af34", "target_ref": "x-oak-tactic--b951d3f3-4d67-579b-8cae-b48eed3aa59f" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e5a38dc2-dc82-5362-a3e5-a5b7e9687d6f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--85a3ebaa-78ef-5d4d-9970-adebe7f0af34", "target_ref": "x-oak-tactic--7fa7f00b-059a-5a92-b145-0893b4530bb6" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--401bc1ab-c27c-579e-b0dd-e6c6a38ca91c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--b726f77e-8a69-5b9b-9abe-08f893391252", "target_ref": "attack-pattern--473b0aa4-1cea-57d5-a0a1-9114ebeb1de6" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8bbd004a-1172-5bf9-870e-2908aeba7d81", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--b726f77e-8a69-5b9b-9abe-08f893391252", "target_ref": "attack-pattern--fe838439-8aa4-5b23-9494-fde9e1d5637c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c5fc9bde-db98-535b-975e-050c117d7b10", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--b726f77e-8a69-5b9b-9abe-08f893391252", "target_ref": "x-oak-tactic--7fa7f00b-059a-5a92-b145-0893b4530bb6" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--69838ce1-4bdb-51e0-a163-7c73af5be3a1", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--b726f77e-8a69-5b9b-9abe-08f893391252", "target_ref": "attack-pattern--bf6ef44d-fa93-5733-862a-26c1ac15a4b4" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3fdf9615-e2c9-50c1-981e-ec3728cd66b4", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--d592c6ff-bfdc-5b88-907e-3e3d8c46415a", "target_ref": "attack-pattern--cf39fa63-9044-5279-8ea5-4acb64d53904" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c672791c-34ab-58ff-bea1-28755b6d9c24", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--d592c6ff-bfdc-5b88-907e-3e3d8c46415a", "target_ref": "x-oak-tactic--a05710d6-773d-5671-81e6-1a9d53ce156a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8d1d9f13-7ba1-58e7-a8d1-58afe450cceb", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--d592c6ff-bfdc-5b88-907e-3e3d8c46415a", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ffcdb041-376d-518a-9b3b-caac68a8e91d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--d592c6ff-bfdc-5b88-907e-3e3d8c46415a", "target_ref": "attack-pattern--093e472c-281c-5e78-9228-486255d3058a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7feb303a-bd3a-5bfb-a5e7-46ee2f917ab2", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--d5db53c2-5339-556c-b7a0-3f69da84ae79", "target_ref": "attack-pattern--e69d7f82-fe18-5677-abba-9dd6347bc5a2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c2f81d7a-fc44-5edc-9558-3cc8cc04f8ee", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--d5db53c2-5339-556c-b7a0-3f69da84ae79", "target_ref": "attack-pattern--bf6ef44d-fa93-5733-862a-26c1ac15a4b4" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--247cbd66-6719-518e-9910-118080c3c22c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--41287938-37d1-5993-b37f-e35a165e8484", "target_ref": "x-oak-tactic--d70463dd-edee-5226-9d2b-4921dac73b9b" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ec3ad3c5-15f9-5a8c-a461-f04ff3ced479", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--41287938-37d1-5993-b37f-e35a165e8484", "target_ref": "attack-pattern--f81933a4-bfe2-528f-94ef-399577e5a682" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7affc8b2-e784-571c-8a23-54ed54e46725", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--41287938-37d1-5993-b37f-e35a165e8484", "target_ref": "attack-pattern--fd40fed2-9093-5b5a-8ebd-5b288e3ae6c5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b002a407-43be-5dbe-becc-f6cc55b0fa2c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--41287938-37d1-5993-b37f-e35a165e8484", "target_ref": "attack-pattern--50650ed5-e07d-5fe8-9adf-7adb33f8182e" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--117a53f7-32e5-50ef-949e-631954bf355a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--1dcf9707-a46e-50d4-aabb-448de9a8d70d", "target_ref": "attack-pattern--d56864b8-d792-56b8-8190-be436238825d" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--bf197eac-8f8a-57a1-b90f-42d7faa0455f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--1dcf9707-a46e-50d4-aabb-448de9a8d70d", "target_ref": "attack-pattern--77b517cc-4b13-5a1b-8262-fb171254ddb5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--38aff210-4da9-58d3-b9a4-90d9717b3b6c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--1dcf9707-a46e-50d4-aabb-448de9a8d70d", "target_ref": "attack-pattern--58002197-8183-530c-9eea-d2d8532a9008" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--35783a47-c87a-5ec1-a492-58fdb97eb013", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--1dcf9707-a46e-50d4-aabb-448de9a8d70d", "target_ref": "attack-pattern--093e472c-281c-5e78-9228-486255d3058a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e82a7643-2dfa-50e6-9403-7032b66bfe8b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--af147847-bb24-54a5-90be-7780200f7fe9", "target_ref": "attack-pattern--3113300f-d067-5bda-b93a-de6cb0044037" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b4ff7460-f58f-501b-af8a-83d41679896b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--af147847-bb24-54a5-90be-7780200f7fe9", "target_ref": "attack-pattern--2e0bf741-b432-58e7-8948-f5599bf0209e" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ff6b556c-6b63-5848-94ed-3fce846af7c4", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--af147847-bb24-54a5-90be-7780200f7fe9", "target_ref": "attack-pattern--ea13efc1-d0df-532c-8add-3d39dcd29713" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2297b008-0e8d-5409-a0e0-df6dc6da7a64", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--af147847-bb24-54a5-90be-7780200f7fe9", "target_ref": "attack-pattern--b8d62a9c-14cd-503a-af8d-a26b825dffcd" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1a19369f-ce4c-5edc-a3c3-a6f093576243", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--af147847-bb24-54a5-90be-7780200f7fe9", "target_ref": "attack-pattern--cccae07c-951c-54bd-bfa4-af87de266370" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c85570e8-a4f7-5744-b03e-ef4df5cd74a6", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--af147847-bb24-54a5-90be-7780200f7fe9", "target_ref": "x-oak-tactic--7fa7f00b-059a-5a92-b145-0893b4530bb6" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2db73794-e5b4-51d3-af45-f72778f924a3", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--efc75ded-3386-5766-b510-57b3180c864a", "target_ref": "attack-pattern--980e72bb-7127-51de-9870-d8a88edc74f8" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f85e20c5-b85f-5aa6-87cc-e6e769b37d9c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--efc75ded-3386-5766-b510-57b3180c864a", "target_ref": "attack-pattern--35ec0966-c5f8-584b-a05f-c614dec60791" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a7da8fe6-79ca-5001-939e-944f56f30af1", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--8939fe79-6810-5df9-b74c-e4042458506c", "target_ref": "attack-pattern--aa324a54-0e77-513e-bc77-dea4683702d2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--548f9276-4ce8-59b0-96a7-530b562405c8", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--8939fe79-6810-5df9-b74c-e4042458506c", "target_ref": "attack-pattern--78f0aa7b-06b4-5266-b348-58db62932a71" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a1942ba2-e230-54c9-9896-258d7ed24dfa", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--8939fe79-6810-5df9-b74c-e4042458506c", "target_ref": "attack-pattern--92ca3ca4-e512-53c5-be45-1f8b05cc913b" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e1af56c2-9803-5f86-bcd5-4c3bb3e06098", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--8939fe79-6810-5df9-b74c-e4042458506c", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--05f57317-ad3c-5969-83a8-b9c5211a1cd2", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--3cc6aa8d-70f6-57ba-9f9a-255a104101ee", "target_ref": "attack-pattern--f0e70cea-8e64-51c4-9f64-09ea2bf642aa" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8306f0e3-f5e0-5f4e-8ca2-7341c692bfae", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--3cc6aa8d-70f6-57ba-9f9a-255a104101ee", "target_ref": "attack-pattern--78f0aa7b-06b4-5266-b348-58db62932a71" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--46ea0334-7ce7-5edc-99bd-5ece5b02c76d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--3cc6aa8d-70f6-57ba-9f9a-255a104101ee", "target_ref": "attack-pattern--12a37f6f-1b04-52d2-9ad3-56bca9ba3350" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c3f30fb8-f5d3-5b7d-9ed8-c6e34f306ac4", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--70b8d8a7-56a3-57f5-8fa6-918121e62f2a", "target_ref": "attack-pattern--cf39fa63-9044-5279-8ea5-4acb64d53904" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--64f9ca1b-43a4-59be-a1d7-c0831f5dda1e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--70b8d8a7-56a3-57f5-8fa6-918121e62f2a", "target_ref": "attack-pattern--44a15cd3-db68-5127-b8dd-cb96e537e3b7" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--891086c6-dc14-579b-b67a-6018e87de620", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--70b8d8a7-56a3-57f5-8fa6-918121e62f2a", "target_ref": "attack-pattern--093e472c-281c-5e78-9228-486255d3058a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--22413fec-1c73-5b3a-8196-b59dd27fa420", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--319fe684-69fe-5761-a6ed-8c4be2bd5eed", "target_ref": "attack-pattern--473b0aa4-1cea-57d5-a0a1-9114ebeb1de6" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--012cdce0-ea53-511c-8122-c5e652224083", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--319fe684-69fe-5761-a6ed-8c4be2bd5eed", "target_ref": "attack-pattern--fe838439-8aa4-5b23-9494-fde9e1d5637c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--96affcec-83e2-5046-8a72-6697a2d0afc6", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--319fe684-69fe-5761-a6ed-8c4be2bd5eed", "target_ref": "attack-pattern--bf6ef44d-fa93-5733-862a-26c1ac15a4b4" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a698a722-0445-53a6-918d-ab06a078e597", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--3a6fb2c2-a382-5fee-ba55-1c82fcba567a", "target_ref": "attack-pattern--4dd355bc-2389-55c4-911c-1bac3744dbbc" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--881a191a-a036-56ec-816e-8fd67f37d3fd", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--3a6fb2c2-a382-5fee-ba55-1c82fcba567a", "target_ref": "attack-pattern--12a37f6f-1b04-52d2-9ad3-56bca9ba3350" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c26daede-88c7-5324-987e-225160c426da", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--3a6fb2c2-a382-5fee-ba55-1c82fcba567a", "target_ref": "attack-pattern--71ecfc99-0efa-5c66-ad46-d0a4851cee1c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c036b208-d4dd-54b3-9088-7c9da585c088", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--5dda2f3e-d81c-5883-90dc-1071467bbdc2", "target_ref": "attack-pattern--e12a0e1d-8dac-5395-b37b-b0aa20814db2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0fdf6783-ac23-55f7-b163-e91fb034c616", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--5dda2f3e-d81c-5883-90dc-1071467bbdc2", "target_ref": "attack-pattern--51de129b-35c6-52ab-baa1-4952b944dad8" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0672e88e-1e71-5f4a-aaf4-6dc44e87dcb5", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--86f9e580-c799-5351-88e8-9c5aac7ca9ce", "target_ref": "attack-pattern--7a7e61f2-3d7c-5d61-90dc-9e198573731c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--20d1c6e0-544f-5ece-84f9-483b1b74336f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--86f9e580-c799-5351-88e8-9c5aac7ca9ce", "target_ref": "attack-pattern--e12a0e1d-8dac-5395-b37b-b0aa20814db2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6bc4ead5-c858-51da-b404-b556c30be44f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--86f9e580-c799-5351-88e8-9c5aac7ca9ce", "target_ref": "attack-pattern--51de129b-35c6-52ab-baa1-4952b944dad8" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--88cad598-ab6e-5639-9f25-c6ab8f486980", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--9993613d-7147-5408-ba3b-d6b3fa032da4", "target_ref": "attack-pattern--f05554c1-f308-5e98-8ef4-af1c993c4752" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d68bca51-0385-5b4d-8940-f488120d6421", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--fa6e4b62-1801-5566-a94a-18ce7d841df3", "target_ref": "attack-pattern--54be17f0-8dd4-5ea7-8043-93eb5530c507" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--72a2ad80-e4fc-559a-aabf-5ad7127e2b18", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--84e710d9-dc6f-5d78-bd78-65d67db358b4", "target_ref": "attack-pattern--419b5ccf-6a56-5639-a130-82e3f14a544e" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1fa6d6f9-07a0-5847-8a42-d05f62d82a1c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--84e710d9-dc6f-5d78-bd78-65d67db358b4", "target_ref": "attack-pattern--8e90a636-2bbf-5517-9dc5-1516e3ff0df6" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5171f411-8dc7-53a1-a212-8c7fb24f94fa", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--84e710d9-dc6f-5d78-bd78-65d67db358b4", "target_ref": "attack-pattern--d9e4a005-06a9-5cee-9f7c-234e20790118" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--cacdee58-d156-51d1-aedc-cb1f6e682d82", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--800dd046-6be1-53b5-a06b-f10deda02e47", "target_ref": "attack-pattern--8e90a636-2bbf-5517-9dc5-1516e3ff0df6" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--08a97831-4cd6-50d0-bf93-4d1ecab53e1b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--4682607a-1450-55ff-8f9d-40e80ee3ec53", "target_ref": "attack-pattern--f474475e-47e9-57d5-b8d1-35077726b770" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f836c28e-8338-5955-b4ff-b5bfcb88fca2", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--4682607a-1450-55ff-8f9d-40e80ee3ec53", "target_ref": "attack-pattern--a7ebcbb2-dafe-5364-9932-e3d7bee02596" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--72da4b9c-a2c1-57dc-876b-a329fd801c16", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--4682607a-1450-55ff-8f9d-40e80ee3ec53", "target_ref": "attack-pattern--bf6ef44d-fa93-5733-862a-26c1ac15a4b4" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0f318024-ab42-5487-9f57-21eb24ab9813", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--9215f060-ba62-53cc-ab1e-7eacb8e416da", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--26cbbf67-b8d8-592f-8f9c-4fd493292bb9", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--9215f060-ba62-53cc-ab1e-7eacb8e416da", "target_ref": "attack-pattern--093e472c-281c-5e78-9228-486255d3058a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f5ed4a73-eadc-58e7-8492-e16578925b30", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--9215f060-ba62-53cc-ab1e-7eacb8e416da", "target_ref": "attack-pattern--2addb763-67df-5522-8864-f3f0d400252a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f26706d5-2d91-5dce-9263-980b5b2e91ae", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--9215f060-ba62-53cc-ab1e-7eacb8e416da", "target_ref": "attack-pattern--c6390ae8-9835-52c2-8fd7-fac5b37acc18" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d870ab25-5fa8-541e-95c1-e12e3de01732", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--bd5b0842-a68f-5f59-8ce5-a839d1790b71", "target_ref": "attack-pattern--00534efe-a713-54c9-9ef3-5b12fd6d0c01" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7d30b2ce-52ac-5917-bc51-b8b22d45ad84", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--bd5b0842-a68f-5f59-8ce5-a839d1790b71", "target_ref": "attack-pattern--e66a56f1-221e-5079-bfe4-99ccbe842a5a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9ffa389e-68db-559e-80de-6bd9332f84b7", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--bd5b0842-a68f-5f59-8ce5-a839d1790b71", "target_ref": "attack-pattern--9b65ffc8-0be6-5809-b228-a85033f790ba" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--dbccc49a-f256-5cfc-b206-8d506c367542", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--0803eb73-a171-5756-be8c-7144d5500114", "target_ref": "attack-pattern--df7c55f8-7843-5ec8-af64-44eff860294b" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1ccff5ea-a5be-5474-907b-3f2b749f7b7c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--0803eb73-a171-5756-be8c-7144d5500114", "target_ref": "attack-pattern--51de129b-35c6-52ab-baa1-4952b944dad8" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--87728d5a-f447-5402-950b-30951e4d8a69", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--0803eb73-a171-5756-be8c-7144d5500114", "target_ref": "attack-pattern--f5bce1e3-3637-56df-8db9-94e793306171" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--690ac66e-6514-53c7-a4a5-865d2c1f6e1a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--b3197214-5976-566d-b4eb-aa3570648ab3", "target_ref": "attack-pattern--980e72bb-7127-51de-9870-d8a88edc74f8" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--292f6029-bc2d-5b3b-91a6-130d4ba4bb6b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--b3197214-5976-566d-b4eb-aa3570648ab3", "target_ref": "attack-pattern--c5adc3a0-7ace-5a7f-b629-506415142209" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9b18765d-2c74-5f16-9bfd-400b79a55c20", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--cfb8979a-d55a-5567-93ab-32910c9b12e3", "target_ref": "attack-pattern--320f06d5-906a-5b2f-a737-01b09ce60315" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4462113b-3f33-5320-a483-a3072d1f123d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--cfb8979a-d55a-5567-93ab-32910c9b12e3", "target_ref": "attack-pattern--7861ffbc-2d68-5482-ba5f-32e5a630a7a6" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--41ea0af8-f2b5-58ef-a0f5-334f586bc414", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--cfb8979a-d55a-5567-93ab-32910c9b12e3", "target_ref": "attack-pattern--58002197-8183-530c-9eea-d2d8532a9008" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9442aaa3-30a4-5932-82a3-f225a53de508", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--cfb8979a-d55a-5567-93ab-32910c9b12e3", "target_ref": "attack-pattern--75d94806-bc98-57dc-894c-8ba499eb5540" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--93047a54-e790-5a3b-8278-a933a75ae8a7", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--4d515559-22f7-5e43-b8ed-98c8a46373e4", "target_ref": "attack-pattern--79d99263-2431-5abd-bf5f-2869979031be" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c3d4056c-46bd-5202-90f6-91ec4499a8f2", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--a45caf1d-65ab-5670-8699-6c523d3b2a4c", "target_ref": "attack-pattern--7a7e61f2-3d7c-5d61-90dc-9e198573731c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--619d3fb7-1007-57b4-b875-722e0a8363b3", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--a45caf1d-65ab-5670-8699-6c523d3b2a4c", "target_ref": "attack-pattern--fbe93b94-384c-543f-9ae9-a73850f14a4f" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--cf661e7f-40c5-5312-9a84-d58b0d5a6489", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--ed7da8b1-ca2d-5fae-b7e9-e608985db378", "target_ref": "attack-pattern--58002197-8183-530c-9eea-d2d8532a9008" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4b177392-c43a-5b1d-9c2a-5985bd29654a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--ed7da8b1-ca2d-5fae-b7e9-e608985db378", "target_ref": "attack-pattern--12a37f6f-1b04-52d2-9ad3-56bca9ba3350" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b8a6eaf2-f6f4-5e3a-9b60-3d1397906c14", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--ed7da8b1-ca2d-5fae-b7e9-e608985db378", "target_ref": "attack-pattern--92ca3ca4-e512-53c5-be45-1f8b05cc913b" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e4556860-ad88-50e9-b1b7-a149b29779c7", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--ed7da8b1-ca2d-5fae-b7e9-e608985db378", "target_ref": "attack-pattern--419b5ccf-6a56-5639-a130-82e3f14a544e" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a5d9e193-25dd-5bd3-97c7-ca78f7f1a118", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--849b49f2-2ef2-5135-82cc-bdb89ae02eeb", "target_ref": "attack-pattern--040f06e8-1825-51bd-8145-52c5b97b26d5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e6cf0408-ebf3-5c84-a825-aef5df3b76fd", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--849b49f2-2ef2-5135-82cc-bdb89ae02eeb", "target_ref": "attack-pattern--8477975b-da56-555e-8bc4-de888d978403" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--136bfc6f-fc10-5185-b95d-539c44e8638c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--849b49f2-2ef2-5135-82cc-bdb89ae02eeb", "target_ref": "x-oak-tactic--462dc46f-d3c8-5956-9fcd-83fd745b277a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a2ca920f-9375-5dcb-b36e-5b5c04b638e2", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--849b49f2-2ef2-5135-82cc-bdb89ae02eeb", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5c2a0d96-10ba-5590-8160-f5fcd3e047a5", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--130c6775-02d3-5eea-9290-51cec5694b33", "target_ref": "attack-pattern--8fea3d14-6b55-534c-986e-1c6f3d1638f2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6b125c5c-d300-540b-a121-a04b0974b972", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--130c6775-02d3-5eea-9290-51cec5694b33", "target_ref": "attack-pattern--e9d0e479-5424-55c4-ab48-976a7a671010" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1c90e22a-dd54-5594-91c4-0c13a0abe165", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--ce7ceb3e-c29f-5e78-aeb5-d370d8ae1d4d", "target_ref": "attack-pattern--51de129b-35c6-52ab-baa1-4952b944dad8" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1e8555df-40eb-5680-85dd-fed6cbe6a03c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--ce7ceb3e-c29f-5e78-aeb5-d370d8ae1d4d", "target_ref": "attack-pattern--54be17f0-8dd4-5ea7-8043-93eb5530c507" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f3f761dc-32e3-5ab3-8ba5-8c1b891b46c1", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--fadadd03-07a3-5bac-b21e-3b8bbb4bd00a", "target_ref": "attack-pattern--b28eb96d-c303-5027-bc7d-413c3659495a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--004137e6-c8ce-53ec-bac4-0b3a21f15aa4", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--6f69f23d-57f8-5973-b611-04a0495b5dd2", "target_ref": "attack-pattern--79d99263-2431-5abd-bf5f-2869979031be" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4e3bc7b4-823b-523f-a9fd-ba7118791729", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--6f69f23d-57f8-5973-b611-04a0495b5dd2", "target_ref": "x-oak-tactic--7fa7f00b-059a-5a92-b145-0893b4530bb6" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ee0d82c8-3112-5522-b770-77f792466135", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--25c7b411-b987-5f55-9581-65a01c549bd3", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--bcd05459-e246-5fff-85b0-0f3416e32dfa", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--25c7b411-b987-5f55-9581-65a01c549bd3", "target_ref": "attack-pattern--e69d7f82-fe18-5677-abba-9dd6347bc5a2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--14ab7a02-bcf7-5658-8b14-770c87e3a69c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--25c7b411-b987-5f55-9581-65a01c549bd3", "target_ref": "attack-pattern--7c80fbf5-2de5-5802-a501-b5e28b2e5b10" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c8f1a799-0f9c-5f94-81ff-4d4ababea776", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--b52b7b37-157e-5572-af25-9182996b6d80", "target_ref": "attack-pattern--2a21b0c6-c06c-5130-9114-0d760dcb5b2c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6e4062fe-b561-5edd-a87d-0a93823e453d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--b52b7b37-157e-5572-af25-9182996b6d80", "target_ref": "attack-pattern--7861ffbc-2d68-5482-ba5f-32e5a630a7a6" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0a893a85-3be2-5d24-8a03-5f9e447a3201", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--b52b7b37-157e-5572-af25-9182996b6d80", "target_ref": "attack-pattern--77b517cc-4b13-5a1b-8262-fb171254ddb5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--47a5de8b-2e06-5e44-946e-35b4f1905c31", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--b52b7b37-157e-5572-af25-9182996b6d80", "target_ref": "attack-pattern--093e472c-281c-5e78-9228-486255d3058a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--092fe631-d476-5ebb-b7de-9804c58d32b7", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--484a7428-0b56-513e-bb23-32dfcb3a9c53", "target_ref": "attack-pattern--9552d7a9-3083-569f-a641-d880fc8a27d5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b107ee4d-8983-5a06-85dc-890acdb1f52b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--484a7428-0b56-513e-bb23-32dfcb3a9c53", "target_ref": "attack-pattern--1a600b6f-3cbd-5141-822e-9577e857e9ec" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--feac69fa-bffc-5159-a3a7-bd994e95c4af", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--484a7428-0b56-513e-bb23-32dfcb3a9c53", "target_ref": "attack-pattern--7861ffbc-2d68-5482-ba5f-32e5a630a7a6" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f2994346-855e-541f-a1a9-d1277f6ade80", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--484a7428-0b56-513e-bb23-32dfcb3a9c53", "target_ref": "attack-pattern--77b517cc-4b13-5a1b-8262-fb171254ddb5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--17983640-8b79-55b0-8f65-cf49b04de980", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--484a7428-0b56-513e-bb23-32dfcb3a9c53", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--60a5426e-1bf6-58b8-bd1a-ea8ec9bb04b2", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--484a7428-0b56-513e-bb23-32dfcb3a9c53", "target_ref": "attack-pattern--9b65ffc8-0be6-5809-b228-a85033f790ba" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--01a8c98e-6285-59e7-ba43-a7edb70caf4e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--aac9b5cf-5562-5498-a0e6-d29636639bb4", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--cf4b3ffd-c94e-5bc8-94c9-cb2b3c247341", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--aac9b5cf-5562-5498-a0e6-d29636639bb4", "target_ref": "attack-pattern--093e472c-281c-5e78-9228-486255d3058a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7e148c85-7430-5a37-8bf9-2d327b9414a3", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--aac9b5cf-5562-5498-a0e6-d29636639bb4", "target_ref": "attack-pattern--2addb763-67df-5522-8864-f3f0d400252a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--63b0f7b2-787c-519b-b5ce-c3c3d25a62fd", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--61165863-81d5-5804-979f-0b68a222d058", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a7958c4f-8cd1-5bc6-951e-32bc394d47e9", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--61165863-81d5-5804-979f-0b68a222d058", "target_ref": "attack-pattern--093e472c-281c-5e78-9228-486255d3058a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b812eaee-ec65-539f-8fbe-934fe6dda214", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--61165863-81d5-5804-979f-0b68a222d058", "target_ref": "attack-pattern--a7ebcbb2-dafe-5364-9932-e3d7bee02596" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--64f5fd1a-08d6-58ec-8207-7502e1a3b244", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--5e779dc3-8586-54f7-8319-183471656fb7", "target_ref": "attack-pattern--f5bce1e3-3637-56df-8db9-94e793306171" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--cbf1f3c4-18b0-5619-956b-18ac1e3fe800", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--5e779dc3-8586-54f7-8319-183471656fb7", "target_ref": "attack-pattern--54be17f0-8dd4-5ea7-8043-93eb5530c507" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c930cf9a-7d49-549a-b71b-066056a0f645", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--e368ee77-148d-556a-adbb-39f953366044", "target_ref": "attack-pattern--aebe2a72-a361-5ab4-8465-3a32a4dbd638" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--53eb8441-4900-5613-8f97-ec55631c47be", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--0b122434-9d1d-57e1-8c0b-2f81fd655384", "target_ref": "attack-pattern--a9cff60c-a2e1-5a72-ad92-358506cc8678" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--fc1a057b-5781-54b4-9f24-a6ef37b8d635", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--ca986208-0f27-52b4-a14d-34902d507d6a", "target_ref": "attack-pattern--a4191d6c-02e1-5dae-aa08-2c4f908e10c5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5107c8d1-e563-5a1c-a47f-b5298e1944e9", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--31c404a6-0440-5307-b594-88fc2e8f740a", "target_ref": "attack-pattern--cf39fa63-9044-5279-8ea5-4acb64d53904" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e51e798c-f1b7-5a11-ae67-173442ef10df", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--31c404a6-0440-5307-b594-88fc2e8f740a", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--eb1031f0-655e-5d37-8e97-1803b2918b5d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--31c404a6-0440-5307-b594-88fc2e8f740a", "target_ref": "attack-pattern--093e472c-281c-5e78-9228-486255d3058a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--238dcae6-8bd6-5bb9-b050-710810e76a4c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--b818a054-7d66-5bb2-bee1-7daecd12e39d", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9b30d8ac-8e56-5bbe-a390-13ec02914e3c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--b818a054-7d66-5bb2-bee1-7daecd12e39d", "target_ref": "attack-pattern--093e472c-281c-5e78-9228-486255d3058a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--777ce325-20ea-5c4d-bd60-7ec53bf18494", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--b818a054-7d66-5bb2-bee1-7daecd12e39d", "target_ref": "attack-pattern--2addb763-67df-5522-8864-f3f0d400252a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9896db99-62f2-54b2-9882-747501d96bb0", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--d4c4b787-351d-5315-86cf-516dc0b79606", "target_ref": "attack-pattern--e69d7f82-fe18-5677-abba-9dd6347bc5a2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e1bc040b-5252-5b27-ac3b-887f0e14f802", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--db8b3d48-eff6-5928-b419-607be4252405", "target_ref": "attack-pattern--a7929123-b1d5-5eee-b042-dc7812bdd713" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--373c14cf-c8c7-52f3-8fbf-9459b34fea21", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--db8b3d48-eff6-5928-b419-607be4252405", "target_ref": "x-oak-tactic--462dc46f-d3c8-5956-9fcd-83fd745b277a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--33530971-175e-59ed-b0fe-ed8e2c026102", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--e27c6451-92e5-507f-8b59-1970820c2567", "target_ref": "attack-pattern--9b65ffc8-0be6-5809-b228-a85033f790ba" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--acc39dff-32a4-51c1-9218-306b58ca408e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--eec24e36-c501-5d4d-b7c8-119b7099a5a0", "target_ref": "x-oak-tactic--a05710d6-773d-5671-81e6-1a9d53ce156a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9417c988-176e-5b9a-9de6-0c0275b64577", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--eec24e36-c501-5d4d-b7c8-119b7099a5a0", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7f7c6562-9407-50aa-91fd-c5f1bbaa7de2", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--eec24e36-c501-5d4d-b7c8-119b7099a5a0", "target_ref": "attack-pattern--093e472c-281c-5e78-9228-486255d3058a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4c422295-c489-5434-8552-eb077f726373", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--5fb134f4-9cd9-553a-969c-75b0fca4f8c4", "target_ref": "attack-pattern--888de015-81a7-52ec-9832-87baca164029" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6a407d90-5a8f-5f4c-9239-4b89e4e5f16a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--8885e6a7-57c6-5273-8beb-feafaad0d5c4", "target_ref": "attack-pattern--f474475e-47e9-57d5-b8d1-35077726b770" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4c51d29a-a429-5069-b9aa-2bab6bbae9fe", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--8885e6a7-57c6-5273-8beb-feafaad0d5c4", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--041bb0a6-a035-5a06-ae88-a44e5e8ac982", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--8885e6a7-57c6-5273-8beb-feafaad0d5c4", "target_ref": "attack-pattern--e69d7f82-fe18-5677-abba-9dd6347bc5a2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a843c42e-c369-5444-84ac-575c1725b980", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--8885e6a7-57c6-5273-8beb-feafaad0d5c4", "target_ref": "attack-pattern--a7ebcbb2-dafe-5364-9932-e3d7bee02596" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c5fde921-2934-5b6a-aa76-cfadd805fab0", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--8885e6a7-57c6-5273-8beb-feafaad0d5c4", "target_ref": "attack-pattern--bf6ef44d-fa93-5733-862a-26c1ac15a4b4" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4dacbe72-6554-5ae7-836f-8d15b7682b68", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--721e1668-d525-5b35-9109-b86c49abd1f0", "target_ref": "x-oak-tactic--a05710d6-773d-5671-81e6-1a9d53ce156a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f1dce8f7-0f39-5adb-87ec-8ab2bed44cd9", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--721e1668-d525-5b35-9109-b86c49abd1f0", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8b4490ad-0c39-5516-9575-1e569abd4f8e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--721e1668-d525-5b35-9109-b86c49abd1f0", "target_ref": "attack-pattern--bf6ef44d-fa93-5733-862a-26c1ac15a4b4" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5bc94c93-3a77-5047-ae73-0b1f1f962876", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--0252e15a-1fe7-5be8-a954-e6b765034b27", "target_ref": "attack-pattern--e45221c4-74e9-52ab-8e20-96d05003d65a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--af5f27d3-16e6-5b16-8ec1-26ce989fddb0", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--0252e15a-1fe7-5be8-a954-e6b765034b27", "target_ref": "attack-pattern--00534efe-a713-54c9-9ef3-5b12fd6d0c01" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b90581ad-a96c-5020-b28a-e973ea1f49b6", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--0252e15a-1fe7-5be8-a954-e6b765034b27", "target_ref": "attack-pattern--c90dbca1-780a-54c2-a24e-3f6d4472a134" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9cb120fe-6d67-526d-add8-59fa579d1696", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--0252e15a-1fe7-5be8-a954-e6b765034b27", "target_ref": "attack-pattern--d9e4a005-06a9-5cee-9f7c-234e20790118" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a74dda72-3ffd-5f5a-b21e-1e9b6f01739c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--1bc76371-f648-5ae4-b6fb-464177530cc6", "target_ref": "attack-pattern--f474475e-47e9-57d5-b8d1-35077726b770" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a5e2f726-3da2-5fe7-9533-a1a3d32ea06c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--1bc76371-f648-5ae4-b6fb-464177530cc6", "target_ref": "attack-pattern--e69d7f82-fe18-5677-abba-9dd6347bc5a2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f84d6847-e6c7-558b-8253-13fe9be27603", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--1bc76371-f648-5ae4-b6fb-464177530cc6", "target_ref": "attack-pattern--bf6ef44d-fa93-5733-862a-26c1ac15a4b4" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c97fc006-dab0-584c-88eb-0fc69a8335c0", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--7cad9a30-c7a3-5fc1-8007-641c23f15ad4", "target_ref": "attack-pattern--fd40fed2-9093-5b5a-8ebd-5b288e3ae6c5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--46b08daf-0d91-5b6f-87c5-9d3d291b4bc3", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--7cad9a30-c7a3-5fc1-8007-641c23f15ad4", "target_ref": "attack-pattern--50650ed5-e07d-5fe8-9adf-7adb33f8182e" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--64d8ecfa-53b6-5f02-9030-c397b78ba43b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--ce08ff9a-c542-5924-8bcd-9eca1de48483", "target_ref": "attack-pattern--2a21b0c6-c06c-5130-9114-0d760dcb5b2c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2a3e2d70-4e0e-57af-98e0-5a81f9345335", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--ce08ff9a-c542-5924-8bcd-9eca1de48483", "target_ref": "attack-pattern--5deeb2fb-1df3-5566-8229-2e83bd241a08" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ba5f3fb9-b03e-5017-8719-96dc36dbbe13", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--ce08ff9a-c542-5924-8bcd-9eca1de48483", "target_ref": "attack-pattern--e69d7f82-fe18-5677-abba-9dd6347bc5a2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0f6e8713-8bd6-5cd7-b9bb-b9ba0755a059", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--24e04db0-aa2a-5100-8be2-56c79cc21cc1", "target_ref": "attack-pattern--846cf1ff-739a-5199-abd6-5f09cc1aeeb0" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--00a57b76-c7b2-5919-9150-204d4bd14dd4", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--cb86812b-dcb6-5cba-a4c0-c94728570cc4", "target_ref": "x-oak-tactic--85e7f358-8dce-57fe-9f3a-4b0a0a048a69" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9e3e3f3f-3b21-509d-9834-1346d62b1560", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--cb86812b-dcb6-5cba-a4c0-c94728570cc4", "target_ref": "attack-pattern--cccae07c-951c-54bd-bfa4-af87de266370" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--517de14f-a172-5a7b-8ac0-7811100cb1f4", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--cb86812b-dcb6-5cba-a4c0-c94728570cc4", "target_ref": "attack-pattern--99c728d0-3e0c-55a4-906f-55c349257e5d" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0bde6d06-4f93-546a-af3b-044e15fee022", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--c7a92850-ef3b-5f1e-87ff-e01a6cef5876", "target_ref": "x-oak-tactic--a05710d6-773d-5671-81e6-1a9d53ce156a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a574be14-1c03-5eef-81e7-ead92ed08f1c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--c7a92850-ef3b-5f1e-87ff-e01a6cef5876", "target_ref": "attack-pattern--ff6b56c9-5bc9-5111-be9b-aa70a55951f1" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5aa545ce-46bf-521d-88f0-ff45ad71fa8c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--c7a92850-ef3b-5f1e-87ff-e01a6cef5876", "target_ref": "attack-pattern--9b65ffc8-0be6-5809-b228-a85033f790ba" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5d193d2f-f070-5046-beb7-feb277da1a5f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--c781d94d-0005-53bd-a142-bcc7479ae9b8", "target_ref": "attack-pattern--b19923a2-b45b-5106-935d-f52d0d875a94" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--58c881b3-7437-550a-b88d-9dff55c9efb0", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--c781d94d-0005-53bd-a142-bcc7479ae9b8", "target_ref": "attack-pattern--ad24b94c-0c7f-5bac-bd56-cf837da9180b" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f99516e8-dd57-52b3-a220-45846063ce61", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--c781d94d-0005-53bd-a142-bcc7479ae9b8", "target_ref": "attack-pattern--f81933a4-bfe2-528f-94ef-399577e5a682" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4309fe7d-6a0a-5380-902e-547ba4370dba", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--c781d94d-0005-53bd-a142-bcc7479ae9b8", "target_ref": "attack-pattern--b6a77deb-14ae-59e3-b4b2-b73065972b6c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--29911f0e-1f99-5a02-8fd4-218f52092961", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--c781d94d-0005-53bd-a142-bcc7479ae9b8", "target_ref": "attack-pattern--9b65ffc8-0be6-5809-b228-a85033f790ba" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--917e9f35-5792-501f-8738-faca5f0d923e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--fde5993c-932e-566c-9756-23690b165393", "target_ref": "x-oak-tactic--a05710d6-773d-5671-81e6-1a9d53ce156a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3c75f4a9-3d5b-5844-bf07-718acda43f46", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--fde5993c-932e-566c-9756-23690b165393", "target_ref": "attack-pattern--052caee2-c494-51c7-87d3-0b5ae531eeb2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6cc54978-6262-5f49-82f9-2668388d9986", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--4778f95d-84f8-5ada-8adf-203ed2b5e2b3", "target_ref": "attack-pattern--cccae07c-951c-54bd-bfa4-af87de266370" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--24fa880c-965c-5830-8c54-3630e257e959", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--ccdb7c1c-d3cb-5b65-8dd8-a78d0640ae53", "target_ref": "x-oak-tactic--a05710d6-773d-5671-81e6-1a9d53ce156a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--fee29e1f-b0cd-55ce-a2e1-7dc35dbc2e88", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--ccdb7c1c-d3cb-5b65-8dd8-a78d0640ae53", "target_ref": "attack-pattern--e69d7f82-fe18-5677-abba-9dd6347bc5a2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--fa5c52ba-5fa4-59ec-aafa-4fb550fe1459", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--ccdb7c1c-d3cb-5b65-8dd8-a78d0640ae53", "target_ref": "attack-pattern--9b65ffc8-0be6-5809-b228-a85033f790ba" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--765cbaa8-e5a8-5a87-b305-e208785598aa", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--769600c5-bc05-5dcc-855b-5ed6dec71f14", "target_ref": "attack-pattern--f81933a4-bfe2-528f-94ef-399577e5a682" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--01ad80e5-44dd-50fa-8a2e-5f4afcefe7ac", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--769600c5-bc05-5dcc-855b-5ed6dec71f14", "target_ref": "attack-pattern--9b65ffc8-0be6-5809-b228-a85033f790ba" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5467fcaf-f4cd-5cbc-8088-4cb3402f7ad9", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--5a9465d2-38d4-5b37-9fe5-07b378471817", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--96e0fea5-bdba-5171-b5d5-055ee7347eba", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--5a9465d2-38d4-5b37-9fe5-07b378471817", "target_ref": "attack-pattern--f5bce1e3-3637-56df-8db9-94e793306171" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--41055cc3-6c4a-5372-bbd3-7a2cc3ec9594", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--5a9465d2-38d4-5b37-9fe5-07b378471817", "target_ref": "attack-pattern--f81933a4-bfe2-528f-94ef-399577e5a682" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b3f57c5e-fdf1-50b5-b35a-3a0fe8817a38", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--657c8038-be69-5c8f-9555-33bea9c11bf2", "target_ref": "attack-pattern--f474475e-47e9-57d5-b8d1-35077726b770" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ee22244c-a07c-5cc0-ad81-113b364f34f4", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--657c8038-be69-5c8f-9555-33bea9c11bf2", "target_ref": "attack-pattern--e69d7f82-fe18-5677-abba-9dd6347bc5a2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6c64a1ed-84ed-5240-9a28-952f6fd41be4", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--657c8038-be69-5c8f-9555-33bea9c11bf2", "target_ref": "attack-pattern--bf6ef44d-fa93-5733-862a-26c1ac15a4b4" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f5d366ec-2b7d-5b84-afdc-8da080303ae5", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--657c8038-be69-5c8f-9555-33bea9c11bf2", "target_ref": "attack-pattern--1d0e4f47-8c77-58a2-b885-f44145ed3bf4" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--fd30881a-cb05-5e98-ae21-798a6a97230b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--1a447504-f871-575d-80ef-9d4f2abcb85e", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b5590847-a8eb-54a7-8cba-feb44ce5d69f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--1a447504-f871-575d-80ef-9d4f2abcb85e", "target_ref": "attack-pattern--f81933a4-bfe2-528f-94ef-399577e5a682" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--361a0f8f-2a84-5b30-a7e2-94a7595e2e59", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--1a447504-f871-575d-80ef-9d4f2abcb85e", "target_ref": "attack-pattern--9b65ffc8-0be6-5809-b228-a85033f790ba" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--de6a0050-9152-52cd-bf77-907abee66aa7", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--37569106-395f-5a51-9e78-ad09d07cefd3", "target_ref": "attack-pattern--a4191d6c-02e1-5dae-aa08-2c4f908e10c5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d33c7161-b604-50eb-8156-69c83173755f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--933f3961-2680-5216-99ab-e2d6d6aa1847", "target_ref": "attack-pattern--44a15cd3-db68-5127-b8dd-cb96e537e3b7" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ef7fd81e-408f-5c93-b08e-6bfd1e7dee3e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--933f3961-2680-5216-99ab-e2d6d6aa1847", "target_ref": "attack-pattern--9b65ffc8-0be6-5809-b228-a85033f790ba" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f258de76-ab91-52f9-82c4-4c47afbf7af6", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--6f68b81c-289a-54d0-b63b-4d10f477c736", "target_ref": "attack-pattern--0658ea79-01b4-5c49-bb12-4c6e0876df4e" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--720f175f-2bc5-5af8-846e-738acd5cdfca", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--6f68b81c-289a-54d0-b63b-4d10f477c736", "target_ref": "attack-pattern--846cf1ff-739a-5199-abd6-5f09cc1aeeb0" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a86e2f5f-3337-565d-8b4b-8e50c306a7cb", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--6f68b81c-289a-54d0-b63b-4d10f477c736", "target_ref": "attack-pattern--80d7913d-0db0-5316-b436-9d914dd8669b" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8f9a9423-fcdb-5833-b4fc-32646e4014b8", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--6f68b81c-289a-54d0-b63b-4d10f477c736", "target_ref": "attack-pattern--fe838439-8aa4-5b23-9494-fde9e1d5637c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--acf1ac68-b0c5-5081-83cb-5a0d6d3866a3", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--6f68b81c-289a-54d0-b63b-4d10f477c736", "target_ref": "attack-pattern--f5bce1e3-3637-56df-8db9-94e793306171" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8e2f75a6-ce09-5d35-9406-ed47b6de903a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--0cd2343f-e35d-5f9e-9fd6-f15d14ef06d7", "target_ref": "attack-pattern--f43b3cdc-ed19-5ad0-b661-706c665d9f83" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d9035512-e621-5814-a29a-cca57594d587", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--0cd2343f-e35d-5f9e-9fd6-f15d14ef06d7", "target_ref": "x-oak-tactic--805d835b-8d16-5215-ab2a-a5a008681adb" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d838cbfe-cbbf-58fc-8d22-2170601e53f9", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--0cd2343f-e35d-5f9e-9fd6-f15d14ef06d7", "target_ref": "attack-pattern--cccae07c-951c-54bd-bfa4-af87de266370" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b4e64e0c-fbd8-56ea-bc30-6526aad84d87", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--6d9d3393-3b0d-58d1-9606-9c9c310aaf68", "target_ref": "attack-pattern--4dd355bc-2389-55c4-911c-1bac3744dbbc" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5689b4c8-0dd2-513f-a53b-c2e404c8cc42", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--6d9d3393-3b0d-58d1-9606-9c9c310aaf68", "target_ref": "x-oak-tactic--7fa7f00b-059a-5a92-b145-0893b4530bb6" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--fdccf072-51c5-5614-919b-0667e70cfd1f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--fc59e040-13e0-525a-aa8c-601aad46ea0c", "target_ref": "x-oak-tactic--a05710d6-773d-5671-81e6-1a9d53ce156a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--000aa035-40bf-5422-a018-3144e26e6a0b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--fc59e040-13e0-525a-aa8c-601aad46ea0c", "target_ref": "attack-pattern--cccae07c-951c-54bd-bfa4-af87de266370" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--48e5d0df-390b-5590-af6e-dbedf9036f52", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--fc59e040-13e0-525a-aa8c-601aad46ea0c", "target_ref": "attack-pattern--bf6ef44d-fa93-5733-862a-26c1ac15a4b4" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--fc393627-22b0-5a05-be4a-29f9c4368498", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--773a4445-53c6-5606-959a-83203e76b6b9", "target_ref": "attack-pattern--2a21b0c6-c06c-5130-9114-0d760dcb5b2c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6351224e-29a9-5b0c-a4be-2980836320d6", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--773a4445-53c6-5606-959a-83203e76b6b9", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8bd7afd3-d5ea-5338-8a3e-7f672ddea21b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--36e2061d-0d31-57bf-8c7b-d9b2e5a9413b", "target_ref": "attack-pattern--980e72bb-7127-51de-9870-d8a88edc74f8" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--39556431-1706-5d75-ab43-f3c79f04edee", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--36e2061d-0d31-57bf-8c7b-d9b2e5a9413b", "target_ref": "attack-pattern--0658ea79-01b4-5c49-bb12-4c6e0876df4e" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--bcfc8142-52f6-5075-ad2c-feb13ea3387a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--9459a692-b097-56a9-9332-6807b3bbd360", "target_ref": "attack-pattern--0658ea79-01b4-5c49-bb12-4c6e0876df4e" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--95a6c47f-31c8-5670-8752-ff96de20d74b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--9459a692-b097-56a9-9332-6807b3bbd360", "target_ref": "attack-pattern--80d7913d-0db0-5316-b436-9d914dd8669b" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4cd952c7-6f40-5adc-baf5-971b0ea95288", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--9459a692-b097-56a9-9332-6807b3bbd360", "target_ref": "attack-pattern--f5bce1e3-3637-56df-8db9-94e793306171" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ad92413a-7ec7-5a3a-bf07-f9dce30c86ec", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--96f0273b-3f01-55e3-9747-9293322337c2", "target_ref": "attack-pattern--1a600b6f-3cbd-5141-822e-9577e857e9ec" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6ad8f8a8-7a1c-5187-b042-162f218a1d17", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--96f0273b-3f01-55e3-9747-9293322337c2", "target_ref": "attack-pattern--9b65ffc8-0be6-5809-b228-a85033f790ba" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d3235428-bef8-59fa-bce0-6a72d6312ada", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--2fe76cf4-a5e9-5b13-b7a5-fbe3f64e584e", "target_ref": "attack-pattern--a7929123-b1d5-5eee-b042-dc7812bdd713" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--bb71585d-b2b1-58f2-840d-ef4707ca906b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--c8c1f7f6-3ea0-5e79-8365-4a1dd91b5fe4", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e3ee2a12-de7a-53e0-9720-ab5cea160f2d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--c8c1f7f6-3ea0-5e79-8365-4a1dd91b5fe4", "target_ref": "attack-pattern--f81933a4-bfe2-528f-94ef-399577e5a682" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--fc3bd3a9-260c-5d48-b92b-f74cef226301", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--c8c1f7f6-3ea0-5e79-8365-4a1dd91b5fe4", "target_ref": "attack-pattern--fd40fed2-9093-5b5a-8ebd-5b288e3ae6c5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1827b2b8-1eb9-506b-9f62-6c1cd964a28f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--c8c1f7f6-3ea0-5e79-8365-4a1dd91b5fe4", "target_ref": "attack-pattern--8fea3d14-6b55-534c-986e-1c6f3d1638f2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f6c1bf19-8b00-5160-b47c-7ccc3aa610de", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--c8c1f7f6-3ea0-5e79-8365-4a1dd91b5fe4", "target_ref": "attack-pattern--e9d0e479-5424-55c4-ab48-976a7a671010" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--724d1355-86f0-50ad-b231-7d8a875f1e71", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--b35a7c3f-f827-526c-aaf4-f97e54cd7e02", "target_ref": "attack-pattern--523b3321-6fd3-5d53-b04e-bbd114e8f317" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--30639e1e-ca78-5396-b3bf-6e18e28b986a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--efcab320-a9d6-5d83-a249-4b57b38f37b9", "target_ref": "x-oak-tactic--a05710d6-773d-5671-81e6-1a9d53ce156a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--38e95c21-069a-508b-8d10-a7aa39c7e99e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--efcab320-a9d6-5d83-a249-4b57b38f37b9", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--791cc3a3-5b4f-515d-939c-620c2c359d9c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--efcab320-a9d6-5d83-a249-4b57b38f37b9", "target_ref": "attack-pattern--bf6ef44d-fa93-5733-862a-26c1ac15a4b4" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--afcbeb51-896c-5030-8a92-ad9c5cc3f647", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--d5ae4f1d-08e1-59b9-a2fb-a4d3ca27ace9", "target_ref": "attack-pattern--9552d7a9-3083-569f-a641-d880fc8a27d5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--bdeeed2d-4ace-5485-965e-e0985593e6ad", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--d5ae4f1d-08e1-59b9-a2fb-a4d3ca27ace9", "target_ref": "attack-pattern--f0e70cea-8e64-51c4-9f64-09ea2bf642aa" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5196eafe-4bf7-56ae-ad7a-9891028822ca", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--d5ae4f1d-08e1-59b9-a2fb-a4d3ca27ace9", "target_ref": "attack-pattern--78f0aa7b-06b4-5266-b348-58db62932a71" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6f0bb462-509d-51b1-a48a-0b0a31c0c150", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--d5ae4f1d-08e1-59b9-a2fb-a4d3ca27ace9", "target_ref": "attack-pattern--12a37f6f-1b04-52d2-9ad3-56bca9ba3350" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--81972670-e63c-5b11-b263-99921cdb9431", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--d5ae4f1d-08e1-59b9-a2fb-a4d3ca27ace9", "target_ref": "attack-pattern--92ca3ca4-e512-53c5-be45-1f8b05cc913b" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e9521424-2738-5cbe-a9f1-20811dc12a03", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--d5ae4f1d-08e1-59b9-a2fb-a4d3ca27ace9", "target_ref": "attack-pattern--29109eef-abfb-5e17-af48-f9314fad8a9c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c4b85d09-2084-517e-a0cb-2f312d638d2c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--2a46bad1-4305-53f5-8c08-bac0367bf573", "target_ref": "attack-pattern--e12a0e1d-8dac-5395-b37b-b0aa20814db2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6d5d7705-92e4-5a20-95ff-6eddd58a992f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--9d61bf9b-46df-571e-a974-24dbd1327636", "target_ref": "attack-pattern--1a600b6f-3cbd-5141-822e-9577e857e9ec" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d3212b5e-5d9b-50cb-a47e-dc79b3e4d6d7", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--9d61bf9b-46df-571e-a974-24dbd1327636", "target_ref": "attack-pattern--5deeb2fb-1df3-5566-8229-2e83bd241a08" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6125d9bc-caa8-5dff-9a57-0debdc8ea941", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--9d61bf9b-46df-571e-a974-24dbd1327636", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--44539fa1-2566-570f-8bb6-33ae2e3b5ab6", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--9d61bf9b-46df-571e-a974-24dbd1327636", "target_ref": "attack-pattern--9b65ffc8-0be6-5809-b228-a85033f790ba" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--cee0a8b4-3097-58da-a936-1d2f0a2a00e2", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--a5390054-90ca-5f11-95fd-91c9b6ccd0e0", "target_ref": "attack-pattern--846cf1ff-739a-5199-abd6-5f09cc1aeeb0" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f885a840-961e-5ffc-8c52-0ce5a8f96e0f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--a5390054-90ca-5f11-95fd-91c9b6ccd0e0", "target_ref": "attack-pattern--80d7913d-0db0-5316-b436-9d914dd8669b" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--76af1a1a-2384-5d66-bb11-efd5f2dcbd04", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--9f149174-24fb-59e4-aa13-3484ae9abb0e", "target_ref": "attack-pattern--0955e8c5-f474-5ac6-bbb8-b53b80ef6c0b" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d459dfeb-15c1-5396-8fce-fc776f2f07ca", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--9f149174-24fb-59e4-aa13-3484ae9abb0e", "target_ref": "attack-pattern--ff6b56c9-5bc9-5111-be9b-aa70a55951f1" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--55f93f6e-32fa-514b-9ed2-4c1e31b10cb9", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--9f149174-24fb-59e4-aa13-3484ae9abb0e", "target_ref": "attack-pattern--cccae07c-951c-54bd-bfa4-af87de266370" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--76ae5f1e-1a6b-5d00-8c1a-d8656b895abe", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--67e5e373-9a9a-50f2-88d6-8ca3391d33c5", "target_ref": "attack-pattern--a508cca2-dfea-5831-9bd5-f7d69abe422b" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--86c7a403-5e06-58c9-a88e-69f8831049f1", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--7c46bed3-bc74-56cc-9b97-071120441667", "target_ref": "x-oak-tactic--3ec189b1-7483-5eec-bd93-b8191e1c508c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--54baf342-9a02-5e4d-8734-a379c72c13dc", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--7c46bed3-bc74-56cc-9b97-071120441667", "target_ref": "attack-pattern--a019d6df-047d-5759-8cee-e8de54595ade" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e5c27f3d-e019-51a5-8eab-aabc7cf7b2e6", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--1e417935-b343-58ef-8240-cfea3d960977", "target_ref": "attack-pattern--4811e8a5-d083-595e-b7f6-e0193347aa3e" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a7d369d6-5a73-5318-910d-cb3ffb43cdad", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--ac5a8381-ef14-5676-8a2a-8a7cd982bf65", "target_ref": "attack-pattern--b28eb96d-c303-5027-bc7d-413c3659495a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--50da69dd-20d9-5d11-b4ff-a84bf0f06a93", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--ac5a8381-ef14-5676-8a2a-8a7cd982bf65", "target_ref": "attack-pattern--473b0aa4-1cea-57d5-a0a1-9114ebeb1de6" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--459d69c6-02e1-5b9c-af28-089643540e1f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--ac5a8381-ef14-5676-8a2a-8a7cd982bf65", "target_ref": "attack-pattern--51de129b-35c6-52ab-baa1-4952b944dad8" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a2c2a174-b602-51eb-83e9-b926d02e5cdb", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--ac5a8381-ef14-5676-8a2a-8a7cd982bf65", "target_ref": "x-oak-tactic--7fa7f00b-059a-5a92-b145-0893b4530bb6" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--730f654f-e229-58e5-b04b-0ca85746d468", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--ac5a8381-ef14-5676-8a2a-8a7cd982bf65", "target_ref": "attack-pattern--bf6ef44d-fa93-5733-862a-26c1ac15a4b4" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0ba2d18f-1ce6-574a-897e-6cb4c949610b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--ac5a8381-ef14-5676-8a2a-8a7cd982bf65", "target_ref": "x-oak-tactic--d3f737a3-09cc-571c-88eb-d5e9e251167d" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f7b869a3-7c40-5259-9b59-46feb3fd4057", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--6c8767bf-892c-5300-8646-d79f95b917a4", "target_ref": "attack-pattern--9552d7a9-3083-569f-a641-d880fc8a27d5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ddb6514b-671a-5e9b-8656-6169ffd73cab", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--6c8767bf-892c-5300-8646-d79f95b917a4", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4736a4dd-fa33-587f-ab77-5ea728c7d29c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--50994397-7ea5-5e27-8fc3-f50aa134811e", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--dc527668-ab1d-5301-93dc-ae6fb6e70fa4", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--50994397-7ea5-5e27-8fc3-f50aa134811e", "target_ref": "attack-pattern--f5bce1e3-3637-56df-8db9-94e793306171" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b09fc942-df66-5205-b453-73bb73a38ad6", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--50994397-7ea5-5e27-8fc3-f50aa134811e", "target_ref": "attack-pattern--f81933a4-bfe2-528f-94ef-399577e5a682" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2326de02-f398-5d11-b86f-4b73dd125848", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--54db2624-e9eb-5b90-a7a6-a3840a40145a", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c8c703ef-1da0-5e36-881e-dee236c7821b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--54db2624-e9eb-5b90-a7a6-a3840a40145a", "target_ref": "attack-pattern--f81933a4-bfe2-528f-94ef-399577e5a682" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2744d802-4024-5dc3-8e07-d7a7e6aebbc6", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--54db2624-e9eb-5b90-a7a6-a3840a40145a", "target_ref": "attack-pattern--fd40fed2-9093-5b5a-8ebd-5b288e3ae6c5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--cb062471-660e-5e39-8019-f5a204d38916", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--734a8b9f-2a46-570f-bd0c-69548096980c", "target_ref": "attack-pattern--0a436476-4fd9-5f9a-9735-7d7a9bf791ae" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--03506f0a-522a-5c3c-8d73-63530627abcd", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--2982628e-4e21-5050-b943-fcc51f6f21df", "target_ref": "attack-pattern--03407478-76ff-57d8-bf96-1cb5b5108d9d" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1e362b67-190e-5e2e-a513-6418d67be6d7", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--2982628e-4e21-5050-b943-fcc51f6f21df", "target_ref": "attack-pattern--523b3321-6fd3-5d53-b04e-bbd114e8f317" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--95c1169b-d1e7-5552-8420-58e9357b1455", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--2982628e-4e21-5050-b943-fcc51f6f21df", "target_ref": "attack-pattern--b6a77deb-14ae-59e3-b4b2-b73065972b6c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8fbce2de-b84e-5e98-941c-639fb9d888a8", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--ff591dc7-858d-512a-b0a3-3135df9c36ce", "target_ref": "attack-pattern--a7929123-b1d5-5eee-b042-dc7812bdd713" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--89a1d9e5-ab77-5f1e-af58-f98a2bd98f95", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--ff591dc7-858d-512a-b0a3-3135df9c36ce", "target_ref": "attack-pattern--b8d62a9c-14cd-503a-af8d-a26b825dffcd" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a648b446-6bf3-5cbd-9573-d6a9dd428437", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--d83d8307-a24c-57d5-a3ae-b3d049ef2e28", "target_ref": "attack-pattern--12a37f6f-1b04-52d2-9ad3-56bca9ba3350" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--48e262c2-7e95-5b6c-bdbb-796f908cab41", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--d83d8307-a24c-57d5-a3ae-b3d049ef2e28", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f0a04b36-2104-5656-886e-9f6e7db664db", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--d83d8307-a24c-57d5-a3ae-b3d049ef2e28", "target_ref": "attack-pattern--c6390ae8-9835-52c2-8fd7-fac5b37acc18" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2c9d0c19-f24d-5450-a7e1-3d4ff3659388", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--d83d8307-a24c-57d5-a3ae-b3d049ef2e28", "target_ref": "attack-pattern--9b65ffc8-0be6-5809-b228-a85033f790ba" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--20f81fb0-1b49-578a-9702-f752875fb2ae", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--d83d8307-a24c-57d5-a3ae-b3d049ef2e28", "target_ref": "attack-pattern--df0b8ece-6ded-558d-9e29-22e289c4243b" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--09263b4c-ca71-5694-b692-852763529304", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--5e94453b-e9c0-54ec-b8fd-5814f1d7a074", "target_ref": "attack-pattern--a55b5859-fa73-5cab-a342-82b97187ea20" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4e80972c-d603-5cb1-8638-277fd27bef35", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--5e94453b-e9c0-54ec-b8fd-5814f1d7a074", "target_ref": "attack-pattern--b027592f-baee-5d2a-9d15-925aa1b77941" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--974fbba9-6af9-5a79-80a7-98cb1f3c482e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--5e94453b-e9c0-54ec-b8fd-5814f1d7a074", "target_ref": "attack-pattern--647504b6-bc6d-5c30-b18d-82c99e51b62d" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--302a33cf-c457-5a3a-b7d9-e05a39c18cb3", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--5e94453b-e9c0-54ec-b8fd-5814f1d7a074", "target_ref": "x-oak-tactic--7fa7f00b-059a-5a92-b145-0893b4530bb6" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c4f8e399-40ed-55c5-92b4-b5473c901276", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--77785b16-2312-5b7c-9ca4-f97ef5700612", "target_ref": "attack-pattern--80d7913d-0db0-5316-b436-9d914dd8669b" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--aac7206f-fa77-5065-93c8-86c5ef6f8b9c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--f3a58632-0be2-5f97-8bc8-43521a78099e", "target_ref": "attack-pattern--2a21b0c6-c06c-5130-9114-0d760dcb5b2c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--49f18e67-b0ae-5537-ab06-83a22c108c07", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--f3a58632-0be2-5f97-8bc8-43521a78099e", "target_ref": "attack-pattern--0de49898-b977-5cf7-9608-eff3285c50c7" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--55aad75b-a026-5c6a-9865-594a2254c598", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--f3a58632-0be2-5f97-8bc8-43521a78099e", "target_ref": "attack-pattern--093e472c-281c-5e78-9228-486255d3058a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5361775b-c2e7-54c5-adfe-62fa646ebc9d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--f3a58632-0be2-5f97-8bc8-43521a78099e", "target_ref": "attack-pattern--bf6ef44d-fa93-5733-862a-26c1ac15a4b4" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b6db7708-9f57-5cc9-8d96-bc6bcdc07e7f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--fb56f122-278b-591e-a26b-69df9f0ec67e", "target_ref": "attack-pattern--093e472c-281c-5e78-9228-486255d3058a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b3a48e69-4cb0-59ed-919c-de7fc97c6d41", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--fb56f122-278b-591e-a26b-69df9f0ec67e", "target_ref": "attack-pattern--a7ebcbb2-dafe-5364-9932-e3d7bee02596" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a40c9995-5add-535b-abd4-09b399ce7fac", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--fb56f122-278b-591e-a26b-69df9f0ec67e", "target_ref": "attack-pattern--28abf537-2707-58ba-99aa-5a6cef69eb87" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ddfd8ba0-8ecc-5687-83da-a1d3073e258d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--b7312451-2ce8-5da1-ab1e-6bb19211c00e", "target_ref": "attack-pattern--9552d7a9-3083-569f-a641-d880fc8a27d5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--18a51f9c-a9a6-5d45-8f79-822c496ae914", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--b7312451-2ce8-5da1-ab1e-6bb19211c00e", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5352e0a1-721e-5a75-a502-3924396d5995", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--a1334861-4d05-58ae-8ce0-ba1f533c7f91", "target_ref": "attack-pattern--040f06e8-1825-51bd-8145-52c5b97b26d5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--62f04054-d890-5553-90e9-b68c93b4daf7", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--a1334861-4d05-58ae-8ce0-ba1f533c7f91", "target_ref": "attack-pattern--79d99263-2431-5abd-bf5f-2869979031be" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--66215d99-22df-55d7-9254-280e5758c708", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--01a0b441-e293-5488-97f6-812501d4e039", "target_ref": "attack-pattern--7a7e61f2-3d7c-5d61-90dc-9e198573731c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--da333ed0-e95c-55f1-87c2-ef5a1dffa362", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--01a0b441-e293-5488-97f6-812501d4e039", "target_ref": "attack-pattern--67bf8212-71d7-5c52-87fc-fa40b25fb11c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--440c35a8-abd5-50b2-aef6-0a6967888f07", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--01a0b441-e293-5488-97f6-812501d4e039", "target_ref": "attack-pattern--286d6367-67eb-51d1-8a4b-cb5bc3d012f4" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b56d7e7e-e998-5ef3-8e7a-760469590659", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--01a0b441-e293-5488-97f6-812501d4e039", "target_ref": "attack-pattern--ba1ed4a4-51a0-58c0-a6ea-3742137d79b9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8239cb52-89e6-50e3-8904-4fe41ee22ea5", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--7c63ae95-d84e-5071-ba3a-1320dcea0025", "target_ref": "attack-pattern--79d99263-2431-5abd-bf5f-2869979031be" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--cb7669f7-66a8-5d84-9575-7227aaec4ddd", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--7c63ae95-d84e-5071-ba3a-1320dcea0025", "target_ref": "x-oak-tactic--5fc49855-8bca-5500-b810-322019badf15" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d727abc6-06ed-5975-bb5e-31f6ba873a9a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--7b67a764-2671-585e-aaef-dda7d1324552", "target_ref": "attack-pattern--1a600b6f-3cbd-5141-822e-9577e857e9ec" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--03a4767a-e559-531d-a09a-ecc542a9cd4c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--7b67a764-2671-585e-aaef-dda7d1324552", "target_ref": "attack-pattern--9b65ffc8-0be6-5809-b228-a85033f790ba" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--56d3bcfe-fbe1-55b7-aca8-924946cdf6af", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--14895875-0716-5cfa-8012-3b8a5337822b", "target_ref": "attack-pattern--f5bce1e3-3637-56df-8db9-94e793306171" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--eba0cd26-5e09-55e2-8409-6bd208991e7e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--14895875-0716-5cfa-8012-3b8a5337822b", "target_ref": "attack-pattern--9b65ffc8-0be6-5809-b228-a85033f790ba" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--082e1345-5c5b-5691-8437-ce640383bc2c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--77c2ed35-c05b-5f5b-b16b-48ab23acba0b", "target_ref": "attack-pattern--9b65ffc8-0be6-5809-b228-a85033f790ba" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1ccafad9-5408-5fc3-935d-a64500714aab", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--d221ee63-d64d-5ec6-bbe5-7d909f861ffd", "target_ref": "attack-pattern--9b65ffc8-0be6-5809-b228-a85033f790ba" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3f879bf1-f35c-52c1-95c5-141d5b51ad91", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--f4c8b967-74ad-530f-964b-2ff43e851fa8", "target_ref": "x-oak-tactic--a05710d6-773d-5671-81e6-1a9d53ce156a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1681fc77-920b-58d0-8925-663589cbc0b7", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--f4c8b967-74ad-530f-964b-2ff43e851fa8", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e50a85d5-d85a-5a55-9c7f-e7ce3c1495d3", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--f4c8b967-74ad-530f-964b-2ff43e851fa8", "target_ref": "attack-pattern--bf6ef44d-fa93-5733-862a-26c1ac15a4b4" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2a7e2d36-007e-5acc-9efc-031ea5b84f1f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--5fc89265-c9e6-5d30-819e-e83ff53c524f", "target_ref": "attack-pattern--1a600b6f-3cbd-5141-822e-9577e857e9ec" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6084ec2f-c048-5603-8bb4-ec6159d39f76", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--5fc89265-c9e6-5d30-819e-e83ff53c524f", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--40e1c616-59ed-5b0e-8e1f-c9fb71a5d200", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--efa32df3-d547-5f1f-a9fc-b7d50f9cdf64", "target_ref": "attack-pattern--4cad59ea-0942-5afc-a239-32ab4e740836" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--cbd714e6-b3bb-595c-ae58-0650708c57e9", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--efa32df3-d547-5f1f-a9fc-b7d50f9cdf64", "target_ref": "attack-pattern--77b517cc-4b13-5a1b-8262-fb171254ddb5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--edab9b1c-cae4-5d8a-a64e-7504aef328b0", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--efa32df3-d547-5f1f-a9fc-b7d50f9cdf64", "target_ref": "attack-pattern--58002197-8183-530c-9eea-d2d8532a9008" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6043164a-491c-5571-b172-1263cfccd972", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--659e61a5-2f99-5683-908a-cafb4234bd04", "target_ref": "attack-pattern--523b3321-6fd3-5d53-b04e-bbd114e8f317" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--caa0dca7-8d72-5358-8a41-089bce88ea70", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--05360e76-38e1-5dc2-b5d1-e26dcfa4db31", "target_ref": "x-oak-tactic--a05710d6-773d-5671-81e6-1a9d53ce156a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e724b8ef-87e5-5162-a4c9-d5eac579d879", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--05360e76-38e1-5dc2-b5d1-e26dcfa4db31", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6aeb3101-aede-5700-92ea-cf885a9d3a51", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--05360e76-38e1-5dc2-b5d1-e26dcfa4db31", "target_ref": "attack-pattern--093e472c-281c-5e78-9228-486255d3058a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--842c7350-fdf6-55c9-b646-e48bb121517f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--e35d328a-5a51-5521-bfae-d103ad68f329", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--47481967-a107-5186-bec7-288bebecc5b2", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--e35d328a-5a51-5521-bfae-d103ad68f329", "target_ref": "attack-pattern--f81933a4-bfe2-528f-94ef-399577e5a682" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b8d575ca-ec89-5067-9c8f-c38af4cd87a5", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--e35d328a-5a51-5521-bfae-d103ad68f329", "target_ref": "attack-pattern--fd40fed2-9093-5b5a-8ebd-5b288e3ae6c5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a6183466-0794-5ec1-b92b-6912f8c23496", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--e35d328a-5a51-5521-bfae-d103ad68f329", "target_ref": "attack-pattern--8fea3d14-6b55-534c-986e-1c6f3d1638f2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e5408e90-b146-5582-b3f7-b9422e18aa1b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--69a49888-2bed-55bd-81c9-b85138788f64", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--76ea4590-fa0b-5be5-af6a-df1b4c850846", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--69a49888-2bed-55bd-81c9-b85138788f64", "target_ref": "attack-pattern--f81933a4-bfe2-528f-94ef-399577e5a682" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b9ae9304-9ea3-5ee7-bba0-25693c9f367b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--69a49888-2bed-55bd-81c9-b85138788f64", "target_ref": "attack-pattern--fd40fed2-9093-5b5a-8ebd-5b288e3ae6c5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--bae3daf6-0635-5fab-acbe-cbf1625e29d2", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--912bff97-5353-557f-8019-08dd70d1fe14", "target_ref": "attack-pattern--0955e8c5-f474-5ac6-bbb8-b53b80ef6c0b" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0a7ad710-976f-546c-a50e-fe0906aefc5a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--06a938e0-52d0-5b73-9932-4e845bf5342e", "target_ref": "attack-pattern--91a0a76b-eaf0-5e8a-b6b9-7f62268ce853" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c6d0038f-3545-5b93-b8b6-1a443e80afa1", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--06a938e0-52d0-5b73-9932-4e845bf5342e", "target_ref": "x-oak-tactic--7fa7f00b-059a-5a92-b145-0893b4530bb6" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e341762c-7057-52a1-a9e5-13aeae88cffe", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--994136f3-f2d2-5b57-89a6-556851609635", "target_ref": "attack-pattern--91a0a76b-eaf0-5e8a-b6b9-7f62268ce853" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--197a57f5-534f-5bf2-9a62-93011ba035cb", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--994136f3-f2d2-5b57-89a6-556851609635", "target_ref": "attack-pattern--c90dbca1-780a-54c2-a24e-3f6d4472a134" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--bdb6d03d-7667-58b2-88f2-726f8febae0c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--994136f3-f2d2-5b57-89a6-556851609635", "target_ref": "attack-pattern--5deeb2fb-1df3-5566-8229-2e83bd241a08" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3434468d-034d-5409-9812-008e22efe904", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--994136f3-f2d2-5b57-89a6-556851609635", "target_ref": "x-oak-tactic--7fa7f00b-059a-5a92-b145-0893b4530bb6" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--02d0ce0d-dda7-5101-9d63-7fb678ea6483", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--043cff6a-78de-55bf-b3ee-4a437c3ac79e", "target_ref": "attack-pattern--12a37f6f-1b04-52d2-9ad3-56bca9ba3350" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--be4212df-9183-5ca3-b9a4-e20522eee403", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--043cff6a-78de-55bf-b3ee-4a437c3ac79e", "target_ref": "attack-pattern--75d94806-bc98-57dc-894c-8ba499eb5540" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b8bc78cc-0b6d-5964-8d2e-b2529774ed8f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--043cff6a-78de-55bf-b3ee-4a437c3ac79e", "target_ref": "attack-pattern--d9e4a005-06a9-5cee-9f7c-234e20790118" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7ce5ce39-f421-5c29-952a-b3537676146b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--2b1d9ac4-b588-56cf-b965-6d6dc9686921", "target_ref": "attack-pattern--58002197-8183-530c-9eea-d2d8532a9008" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--98c0b8fb-85cf-51c1-aab2-aa66ace02b5d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--2b1d9ac4-b588-56cf-b965-6d6dc9686921", "target_ref": "attack-pattern--7ec6ff5b-83cd-5725-adda-2b5d3a846414" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9008f7e6-073f-50ac-bfe2-f10bd81c64c8", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--2b1d9ac4-b588-56cf-b965-6d6dc9686921", "target_ref": "attack-pattern--12a37f6f-1b04-52d2-9ad3-56bca9ba3350" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--09e5ba79-5476-5af2-8a1a-fef47e883d1e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--2b1d9ac4-b588-56cf-b965-6d6dc9686921", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--dc22aacb-b0df-504c-94dc-88b5cdd5aceb", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--2b1d9ac4-b588-56cf-b965-6d6dc9686921", "target_ref": "attack-pattern--093e472c-281c-5e78-9228-486255d3058a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1da259de-9c0b-5458-bea6-a6de949ffb47", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--2b1d9ac4-b588-56cf-b965-6d6dc9686921", "target_ref": "attack-pattern--bf6ef44d-fa93-5733-862a-26c1ac15a4b4" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5a123e85-3278-589a-be1f-77d90f40fe8a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--2b1d9ac4-b588-56cf-b965-6d6dc9686921", "target_ref": "attack-pattern--1d0e4f47-8c77-58a2-b885-f44145ed3bf4" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8d6d7605-6a39-5482-a359-6065d276bdd6", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--f24c6371-1dbc-5398-bd69-c4d3463a6094", "target_ref": "attack-pattern--ea13efc1-d0df-532c-8add-3d39dcd29713" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--926d5520-fb26-59b3-a862-9f4c3e63da56", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--f24c6371-1dbc-5398-bd69-c4d3463a6094", "target_ref": "attack-pattern--b8d62a9c-14cd-503a-af8d-a26b825dffcd" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--448d50d9-a883-596d-a38c-087b148fe758", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--f24c6371-1dbc-5398-bd69-c4d3463a6094", "target_ref": "x-oak-tactic--7fa7f00b-059a-5a92-b145-0893b4530bb6" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1e8c2559-99fe-5584-983e-be2e7fe453d7", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--8a9ed543-4d4f-5dd0-bb5f-0255231c9909", "target_ref": "attack-pattern--2a21b0c6-c06c-5130-9114-0d760dcb5b2c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a21a7939-f44e-56ef-af6a-31ed6411a91a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--8a9ed543-4d4f-5dd0-bb5f-0255231c9909", "target_ref": "attack-pattern--7861ffbc-2d68-5482-ba5f-32e5a630a7a6" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--71078ce9-9150-5d47-bfa0-806d411b1d46", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--8a9ed543-4d4f-5dd0-bb5f-0255231c9909", "target_ref": "attack-pattern--77b517cc-4b13-5a1b-8262-fb171254ddb5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5f674bde-5cc8-5b64-ab36-3b24ab4d9c18", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--8a9ed543-4d4f-5dd0-bb5f-0255231c9909", "target_ref": "attack-pattern--093e472c-281c-5e78-9228-486255d3058a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f3f31dc1-640e-54e8-af74-c898580fb592", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--8a9ed543-4d4f-5dd0-bb5f-0255231c9909", "target_ref": "attack-pattern--bf6ef44d-fa93-5733-862a-26c1ac15a4b4" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--fdeceb7c-a26b-53fd-a0fd-1719313f8436", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--81ff48ff-c45b-5f99-91dd-68162295e703", "target_ref": "attack-pattern--a55b5859-fa73-5cab-a342-82b97187ea20" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--64707fd0-fdb5-5365-b590-815e34374198", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--81ff48ff-c45b-5f99-91dd-68162295e703", "target_ref": "attack-pattern--b027592f-baee-5d2a-9d15-925aa1b77941" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--92d0a1f1-247b-505d-8d23-4b32561778ee", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--81ff48ff-c45b-5f99-91dd-68162295e703", "target_ref": "attack-pattern--921bd515-01df-5ee1-a643-7138f8d1ee7c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--da66a807-add5-59cf-a1c3-cfe18e730f23", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--81ff48ff-c45b-5f99-91dd-68162295e703", "target_ref": "attack-pattern--5deeb2fb-1df3-5566-8229-2e83bd241a08" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--15c7324c-17ba-5770-a008-90e867e6d176", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--306d3453-73b0-5ff4-83a1-24f602f0b0dc", "target_ref": "attack-pattern--1a600b6f-3cbd-5141-822e-9577e857e9ec" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3e31ca1b-9e87-585c-96e7-4095a4c1a0a4", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--c1dcc184-d6ec-549a-bd8e-fd8cfb984bac", "target_ref": "attack-pattern--3065cec6-1624-5c76-a1a6-417a305ecec3" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--af6d4339-5b6e-52e6-8f61-038daa80e349", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--4728bf1c-4b46-5942-adfd-15edd0812818", "target_ref": "attack-pattern--9b65ffc8-0be6-5809-b228-a85033f790ba" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e623e504-4c15-5186-9bcb-950844a9c694", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--2fcd4f03-702e-5ecb-96e7-929c744cda23", "target_ref": "attack-pattern--e45221c4-74e9-52ab-8e20-96d05003d65a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--91995eee-45d9-5c8d-b1d6-6ef70c5a3c6c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--2fcd4f03-702e-5ecb-96e7-929c744cda23", "target_ref": "attack-pattern--473b0aa4-1cea-57d5-a0a1-9114ebeb1de6" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--759771cd-e31a-58e4-ada2-5b8ddfbf1b48", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--2fcd4f03-702e-5ecb-96e7-929c744cda23", "target_ref": "attack-pattern--b027592f-baee-5d2a-9d15-925aa1b77941" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f166fd9f-8201-58ce-8ef6-b41e5e0f4bd7", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--2fcd4f03-702e-5ecb-96e7-929c744cda23", "target_ref": "attack-pattern--921bd515-01df-5ee1-a643-7138f8d1ee7c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6429910b-9d22-5c36-808f-40207fd0af72", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--2fcd4f03-702e-5ecb-96e7-929c744cda23", "target_ref": "attack-pattern--5deeb2fb-1df3-5566-8229-2e83bd241a08" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c542df99-3529-5e67-8bb7-7e2e33efa679", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--2cb0d582-38ac-58f3-9134-4ac6aded72e3", "target_ref": "attack-pattern--e45221c4-74e9-52ab-8e20-96d05003d65a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--137b6da0-edf9-50c0-aea3-2d4a0c52157b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--2cb0d582-38ac-58f3-9134-4ac6aded72e3", "target_ref": "attack-pattern--cccae07c-951c-54bd-bfa4-af87de266370" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5fe33c0f-7270-54ec-b313-b7350a54c1b8", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--2cb0d582-38ac-58f3-9134-4ac6aded72e3", "target_ref": "attack-pattern--c23370e0-2f94-555e-8e18-e753a767bb51" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8dca4d6e-cc02-5811-963d-6dd209756293", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--8cf8579e-04fc-56ba-b7df-22b8bef518a8", "target_ref": "attack-pattern--f7bfa62c-b23c-5fef-a74b-bca3b34cf4df" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--68b90b21-61d6-5a89-87c2-18b4120872bf", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--8cf8579e-04fc-56ba-b7df-22b8bef518a8", "target_ref": "attack-pattern--92ca3ca4-e512-53c5-be45-1f8b05cc913b" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7099079e-22d1-517c-928d-45a901c88e7e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--8cf8579e-04fc-56ba-b7df-22b8bef518a8", "target_ref": "attack-pattern--419b5ccf-6a56-5639-a130-82e3f14a544e" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2aa28ccc-10e0-5cae-91ed-f7cd67c3f4a6", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--8cf8579e-04fc-56ba-b7df-22b8bef518a8", "target_ref": "x-oak-tactic--7fa7f00b-059a-5a92-b145-0893b4530bb6" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--53b4b361-5cc3-5c21-ac3b-04ecacc0b7a7", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--b86d3db0-5010-5234-8fb7-971c18d71a53", "target_ref": "attack-pattern--9552d7a9-3083-569f-a641-d880fc8a27d5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5b19f713-2c88-5601-8c5a-103ea3f7f10d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--b86d3db0-5010-5234-8fb7-971c18d71a53", "target_ref": "attack-pattern--7861ffbc-2d68-5482-ba5f-32e5a630a7a6" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d9beb7b1-ebcd-5961-883f-2b243993b4a0", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--b86d3db0-5010-5234-8fb7-971c18d71a53", "target_ref": "attack-pattern--f0e70cea-8e64-51c4-9f64-09ea2bf642aa" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0ea5925d-a7cd-5295-a66b-48ef502e85d8", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--b86d3db0-5010-5234-8fb7-971c18d71a53", "target_ref": "attack-pattern--78f0aa7b-06b4-5266-b348-58db62932a71" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--557b9270-dfa7-5cd5-9de8-bc12989a7299", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--e2ae6705-9a09-502f-9892-3bd8044a8ddc", "target_ref": "attack-pattern--94a03321-bd42-5ba5-a14c-869236fb3822" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--83330b5a-6d18-548e-bf1e-ea62796ef651", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--e2ae6705-9a09-502f-9892-3bd8044a8ddc", "target_ref": "attack-pattern--a7929123-b1d5-5eee-b042-dc7812bdd713" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--747ee01b-35ab-5330-ab36-a479affdcc83", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--26c60d65-d771-592f-8bf5-f164ee64b603", "target_ref": "attack-pattern--6d6dfb01-6c40-58c3-ac5a-98b6042866bd" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--db0cdd42-adb9-575c-8deb-e4f4029888bb", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--26c60d65-d771-592f-8bf5-f164ee64b603", "target_ref": "attack-pattern--bf6ef44d-fa93-5733-862a-26c1ac15a4b4" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2e93376a-d22d-54ae-b806-76c0e763725f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--26c60d65-d771-592f-8bf5-f164ee64b603", "target_ref": "attack-pattern--a508cca2-dfea-5831-9bd5-f7d69abe422b" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--387d29be-962b-5f25-852f-9068867d3d8f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--551a745d-0cd3-509a-97dc-caafb98c32f7", "target_ref": "attack-pattern--03a52b22-ed85-5ba7-9142-73d4e20f0c5a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0e9a43c6-2ea9-5cf7-9b69-aae14913cfe2", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--551a745d-0cd3-509a-97dc-caafb98c32f7", "target_ref": "attack-pattern--7ec6ff5b-83cd-5725-adda-2b5d3a846414" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1439c7d0-c8b1-51e3-9449-2f281cf90df5", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--551a745d-0cd3-509a-97dc-caafb98c32f7", "target_ref": "attack-pattern--8e90a636-2bbf-5517-9dc5-1516e3ff0df6" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c22cab75-d777-5afd-93cd-0fa05d243327", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--3e4ac61b-8e13-58f7-b41b-e38a4515df4d", "target_ref": "attack-pattern--0658ea79-01b4-5c49-bb12-4c6e0876df4e" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e07144a0-81db-5f15-910d-97af8e201906", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--3e4ac61b-8e13-58f7-b41b-e38a4515df4d", "target_ref": "attack-pattern--80d7913d-0db0-5316-b436-9d914dd8669b" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a33c3f31-5051-5e58-b92b-c3c1a78d7bf1", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--53095eb5-d9ee-5cca-b8b1-47c0b2b68655", "target_ref": "attack-pattern--320f06d5-906a-5b2f-a737-01b09ce60315" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c4d9fd80-eb90-5508-bf53-50b3c81fd6f4", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--53095eb5-d9ee-5cca-b8b1-47c0b2b68655", "target_ref": "attack-pattern--58002197-8183-530c-9eea-d2d8532a9008" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--849ba369-074f-542f-8dad-5aa588bd42af", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--ed27ae19-effb-56d9-bc1e-1bc81f94c10c", "target_ref": "attack-pattern--bf6ef44d-fa93-5733-862a-26c1ac15a4b4" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--fd8471df-583d-5df0-b821-ed99aeaa06bd", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--ed27ae19-effb-56d9-bc1e-1bc81f94c10c", "target_ref": "attack-pattern--a508cca2-dfea-5831-9bd5-f7d69abe422b" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4ab960d1-e4db-586d-81bf-d30a6abeda75", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--0fa1dd74-b4d3-5188-83fa-f3092a7c231b", "target_ref": "attack-pattern--b0b659a0-71d1-5943-b57e-96082367adef" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9bf47ba2-378f-5f2d-8d96-307f99aa02bc", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--0fa1dd74-b4d3-5188-83fa-f3092a7c231b", "target_ref": "attack-pattern--b10815cf-cfad-5b45-97a2-61614ce86053" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a7408ec2-2888-500a-a47a-15d9555c8557", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--005da7ab-366d-5d89-bd65-18ef9dff4b62", "target_ref": "attack-pattern--39564b4f-4af2-5b1a-8405-eb8cf9d2f12b" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d1fe463c-ded1-579e-b41d-8b970bd68523", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--005da7ab-366d-5d89-bd65-18ef9dff4b62", "target_ref": "attack-pattern--b027592f-baee-5d2a-9d15-925aa1b77941" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d2b27bb5-9bac-522a-9773-5d3b83b54175", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--005da7ab-366d-5d89-bd65-18ef9dff4b62", "target_ref": "attack-pattern--5deeb2fb-1df3-5566-8229-2e83bd241a08" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b878eb5f-b858-5911-9351-eba8f850565f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--005da7ab-366d-5d89-bd65-18ef9dff4b62", "target_ref": "x-oak-tactic--7fa7f00b-059a-5a92-b145-0893b4530bb6" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e5593289-60de-5055-8a05-2d987ae8c5ce", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--75648516-7b11-5a36-9763-748c6305725e", "target_ref": "attack-pattern--51de129b-35c6-52ab-baa1-4952b944dad8" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3258682e-8584-5cb3-80d9-942e58e40048", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--b39ada65-86c2-5c6b-b98d-f782c25103d2", "target_ref": "attack-pattern--286d6367-67eb-51d1-8a4b-cb5bc3d012f4" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--32bd2e73-75bc-5328-9bf1-95f4d9bcbd69", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--188cfdf4-c6e7-5b76-b8dc-f626cdf96c5d", "target_ref": "attack-pattern--91a0a76b-eaf0-5e8a-b6b9-7f62268ce853" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a023f2d5-eb4f-5668-87ca-011b46b905f8", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--188cfdf4-c6e7-5b76-b8dc-f626cdf96c5d", "target_ref": "attack-pattern--00534efe-a713-54c9-9ef3-5b12fd6d0c01" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b6467fd2-8eae-5e83-a5b5-9fddcd74d4e2", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--188cfdf4-c6e7-5b76-b8dc-f626cdf96c5d", "target_ref": "attack-pattern--f80bec40-b7fa-52eb-a6a4-d4acd59dce38" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--eea54b50-e6fe-590d-9a1d-c91564038bc7", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--56e327fe-7c36-5e2f-81f6-cff0c972f7dc", "target_ref": "attack-pattern--f80bec40-b7fa-52eb-a6a4-d4acd59dce38" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ce431fa2-90d5-5ef1-8855-fc4545160035", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--56e327fe-7c36-5e2f-81f6-cff0c972f7dc", "target_ref": "x-oak-tactic--7fa7f00b-059a-5a92-b145-0893b4530bb6" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c6ec8752-cdb6-5aad-bde4-d2fcefe4cebc", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--4471c55b-5b54-55d8-80e8-487648612b2e", "target_ref": "attack-pattern--58002197-8183-530c-9eea-d2d8532a9008" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b35c8a0b-50ab-5333-ad0f-691dbefa2f25", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--4471c55b-5b54-55d8-80e8-487648612b2e", "target_ref": "attack-pattern--7ec6ff5b-83cd-5725-adda-2b5d3a846414" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1f3b213a-43bd-5bda-8dd1-f9f778255ba9", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--4471c55b-5b54-55d8-80e8-487648612b2e", "target_ref": "attack-pattern--af731cf1-9b12-550c-b56b-8ad41735e526" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d186b4fb-e9d1-51c9-a94a-c473709f3cc5", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--a3b5820b-120f-5457-903d-dcc369725acc", "target_ref": "attack-pattern--07314232-9e18-5d07-b8a6-6ce0ffec7200" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--314187ec-85e3-5e21-a068-2c3a99b47da5", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--a3b5820b-120f-5457-903d-dcc369725acc", "target_ref": "attack-pattern--7c80fbf5-2de5-5802-a501-b5e28b2e5b10" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--675d1a94-9c31-510d-b0d5-cbf6f73cfefe", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--12f43e50-a774-5b27-9d80-566d4ee9ffe8", "target_ref": "attack-pattern--0955e8c5-f474-5ac6-bbb8-b53b80ef6c0b" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--05d04b42-92aa-5945-a6d9-82fe8dcb8a4b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--12f43e50-a774-5b27-9d80-566d4ee9ffe8", "target_ref": "attack-pattern--414a6469-36be-5ecd-9603-290930d42b86" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9eb2ad59-ae25-5598-bec7-d70f0db066d2", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--6d95dc8f-7480-525d-beb6-b0615b46fff4", "target_ref": "attack-pattern--888de015-81a7-52ec-9832-87baca164029" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6d0cb940-6410-5d5e-81db-0801f7724932", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--6d95dc8f-7480-525d-beb6-b0615b46fff4", "target_ref": "attack-pattern--a4191d6c-02e1-5dae-aa08-2c4f908e10c5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--94ab05a4-739a-5f45-a926-7ef8c56030ac", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--a90e843a-921e-58d3-8e5c-6d1672abb3bd", "target_ref": "attack-pattern--bf6ef44d-fa93-5733-862a-26c1ac15a4b4" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--035f31d8-a08a-590e-8101-7e49b2250437", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--a90e843a-921e-58d3-8e5c-6d1672abb3bd", "target_ref": "attack-pattern--7c80fbf5-2de5-5802-a501-b5e28b2e5b10" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a73256c8-2e36-5c1b-9f0b-9b437c5ad08b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--99890b5f-0b96-5511-bfe0-1ea06ad7d0ca", "target_ref": "attack-pattern--03407478-76ff-57d8-bf96-1cb5b5108d9d" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b5cde28f-5511-51d2-a119-4fcea200d1c7", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--99890b5f-0b96-5511-bfe0-1ea06ad7d0ca", "target_ref": "attack-pattern--b6a77deb-14ae-59e3-b4b2-b73065972b6c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--413127db-7600-554a-8c5f-990a20d81a7e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--99890b5f-0b96-5511-bfe0-1ea06ad7d0ca", "target_ref": "attack-pattern--8fea3d14-6b55-534c-986e-1c6f3d1638f2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--782946a8-a29d-5c8e-8721-502cf584a6f5", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--414f87d2-6756-553a-839d-a608a88065a8", "target_ref": "attack-pattern--980e72bb-7127-51de-9870-d8a88edc74f8" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4729522c-f5ee-5b36-9cea-99531d30cad7", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--414f87d2-6756-553a-839d-a608a88065a8", "target_ref": "attack-pattern--0658ea79-01b4-5c49-bb12-4c6e0876df4e" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f7b23d94-c2cb-5373-a804-ac0d354f9ee0", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--1a6da83d-33bf-514c-a9d0-833beb24b7ad", "target_ref": "attack-pattern--8e90a636-2bbf-5517-9dc5-1516e3ff0df6" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--934defa0-9e36-537d-bde7-48291e3c87a6", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--779b7cd3-f2f2-5888-949b-0c13ecf52141", "target_ref": "attack-pattern--eaa6f530-4f94-5ca6-b2d9-cbb9f56636a0" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--40978f6b-d4b0-5396-88a0-1a0740cc4c30", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--779b7cd3-f2f2-5888-949b-0c13ecf52141", "target_ref": "x-oak-tactic--7fa7f00b-059a-5a92-b145-0893b4530bb6" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ce07a5bc-94b2-5ae7-9d4c-da27e68a799a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--94bdfe1b-46db-566d-8c3f-bd71f738816e", "target_ref": "attack-pattern--b8d62a9c-14cd-503a-af8d-a26b825dffcd" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6c7c48e9-2714-56fa-b0a6-a8147f4d6917", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--94bdfe1b-46db-566d-8c3f-bd71f738816e", "target_ref": "attack-pattern--bf6ef44d-fa93-5733-862a-26c1ac15a4b4" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--28e8d087-3462-5846-b0b3-103a34c9637d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--94bdfe1b-46db-566d-8c3f-bd71f738816e", "target_ref": "attack-pattern--1d0e4f47-8c77-58a2-b885-f44145ed3bf4" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5e73fa79-135d-55ca-b2bd-23af95abc43d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--8c54c4c8-9fb8-56b9-94ca-b704331c7584", "target_ref": "attack-pattern--8fea3d14-6b55-534c-986e-1c6f3d1638f2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--98c76d0e-407d-508a-be87-934731b927dc", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--8c54c4c8-9fb8-56b9-94ca-b704331c7584", "target_ref": "attack-pattern--e9d0e479-5424-55c4-ab48-976a7a671010" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9079cc40-d221-5599-b82e-149d99bad5cf", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--9f758ada-ce7d-5d79-90f1-df12ac2bf694", "target_ref": "attack-pattern--8fea3d14-6b55-534c-986e-1c6f3d1638f2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0cfecf22-ca7b-5b91-bb13-e425ea4b7feb", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--9f758ada-ce7d-5d79-90f1-df12ac2bf694", "target_ref": "attack-pattern--e9d0e479-5424-55c4-ab48-976a7a671010" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--158335f7-744e-54be-b541-c6d145964883", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--1be3947f-926e-59c2-b9db-f194e6853399", "target_ref": "attack-pattern--040f06e8-1825-51bd-8145-52c5b97b26d5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--37cd58aa-4368-56ed-9f98-105249051f56", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--1be3947f-926e-59c2-b9db-f194e6853399", "target_ref": "attack-pattern--88316cc3-a9f9-5dc9-96e0-0f8889ca0234" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a3d91959-e840-5e40-8180-32c5e24ea459", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--1be3947f-926e-59c2-b9db-f194e6853399", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f307fe04-84a6-51c1-97c3-766606e7fa8f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--d813263d-13e3-5c00-920a-b94f81e38ac8", "target_ref": "attack-pattern--aa324a54-0e77-513e-bc77-dea4683702d2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8ea62704-dab3-5190-8c84-944e6fa2ec1b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--d813263d-13e3-5c00-920a-b94f81e38ac8", "target_ref": "attack-pattern--b027592f-baee-5d2a-9d15-925aa1b77941" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ea8643f2-c8e0-5355-8a63-3877f0b8667f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--d813263d-13e3-5c00-920a-b94f81e38ac8", "target_ref": "attack-pattern--921bd515-01df-5ee1-a643-7138f8d1ee7c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--153cf6cf-d5a4-5dc6-bb64-15274d2eda37", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--d813263d-13e3-5c00-920a-b94f81e38ac8", "target_ref": "x-oak-tactic--b951d3f3-4d67-579b-8cae-b48eed3aa59f" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--aec9f406-e933-503c-97b3-033aa89834fe", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--d813263d-13e3-5c00-920a-b94f81e38ac8", "target_ref": "x-oak-tactic--7fa7f00b-059a-5a92-b145-0893b4530bb6" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2154aab8-acce-5a56-a257-ab5318c22654", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--d813263d-13e3-5c00-920a-b94f81e38ac8", "target_ref": "attack-pattern--bf6ef44d-fa93-5733-862a-26c1ac15a4b4" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--af703857-1ab5-56e5-8bfe-68d692e29dc0", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--08a889eb-c45f-5a1e-a855-3336703206a5", "target_ref": "attack-pattern--f05554c1-f308-5e98-8ef4-af1c993c4752" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0da2eeee-88a2-5a6b-9f0d-692eb5555bf5", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--08a889eb-c45f-5a1e-a855-3336703206a5", "target_ref": "x-oak-tactic--5fc49855-8bca-5500-b810-322019badf15" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3cc31828-1302-55ac-9dad-d0cffb77e30e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--08a889eb-c45f-5a1e-a855-3336703206a5", "target_ref": "attack-pattern--a508cca2-dfea-5831-9bd5-f7d69abe422b" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--55277d49-25b6-5101-b60c-e587b4802387", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--473a5e59-2f71-52cf-9cc9-0fac2945a328", "target_ref": "attack-pattern--a019d6df-047d-5759-8cee-e8de54595ade" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c391d066-be7f-5959-8039-2043887ee781", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--473a5e59-2f71-52cf-9cc9-0fac2945a328", "target_ref": "attack-pattern--f5bce1e3-3637-56df-8db9-94e793306171" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e7db484d-e56f-5484-9764-fca1699c326a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--53c237bd-d459-5724-926e-3a9ded62d4ca", "target_ref": "attack-pattern--b28eb96d-c303-5027-bc7d-413c3659495a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--769bde37-a4a7-5117-9e30-8998f476c9cc", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--53c237bd-d459-5724-926e-3a9ded62d4ca", "target_ref": "attack-pattern--c5adc3a0-7ace-5a7f-b629-506415142209" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--76d46f0e-2432-52a2-a465-420ee4845453", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--efb74114-6b83-579c-96ad-29ba4bc61b73", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--cfb80341-acd6-5395-bf69-56f84433cecd", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--efb74114-6b83-579c-96ad-29ba4bc61b73", "target_ref": "attack-pattern--093e472c-281c-5e78-9228-486255d3058a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3db3f784-6f08-5ae4-a797-750fe61d5a2b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--efb74114-6b83-579c-96ad-29ba4bc61b73", "target_ref": "attack-pattern--fccf2600-ec82-53d1-b3ba-0384a28f8be3" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--09ed7b7a-d17b-5cd9-81d1-f93d57574664", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--efb74114-6b83-579c-96ad-29ba4bc61b73", "target_ref": "attack-pattern--bf6ef44d-fa93-5733-862a-26c1ac15a4b4" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--fc5dd610-1fc5-5421-a140-28dda0241742", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--e6b8949f-e1d6-5f47-97d7-ac0f8ae9327a", "target_ref": "attack-pattern--b0b659a0-71d1-5943-b57e-96082367adef" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5a7b7119-f394-5cae-8428-7291684e6c73", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--e6b8949f-e1d6-5f47-97d7-ac0f8ae9327a", "target_ref": "attack-pattern--f783bf18-a6db-5a11-bcbf-3ad4892f9214" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3dcf3adf-d6a6-53ae-9126-082a4a228103", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--0ea302e3-d920-55d7-8560-5c14a240adea", "target_ref": "attack-pattern--e45221c4-74e9-52ab-8e20-96d05003d65a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ef9460cc-30fb-5b2c-af59-f045a3c2b750", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--0ea302e3-d920-55d7-8560-5c14a240adea", "target_ref": "attack-pattern--473b0aa4-1cea-57d5-a0a1-9114ebeb1de6" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--16da4a7a-894a-5f15-ad1b-ccda6c12fa6d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--0ea302e3-d920-55d7-8560-5c14a240adea", "target_ref": "attack-pattern--b027592f-baee-5d2a-9d15-925aa1b77941" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d173da74-6544-58fd-918b-27d07f129878", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--0ea302e3-d920-55d7-8560-5c14a240adea", "target_ref": "attack-pattern--921bd515-01df-5ee1-a643-7138f8d1ee7c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--baff415d-f469-5748-8fb8-32334378196e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--0ea302e3-d920-55d7-8560-5c14a240adea", "target_ref": "attack-pattern--5deeb2fb-1df3-5566-8229-2e83bd241a08" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--dceaa675-3189-55a5-8ac4-78651cdf84fe", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--25fe6d24-4133-557d-ae33-9138f74db17f", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8dcaa289-0bde-5c62-ada9-adf7cd6ccd42", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--25fe6d24-4133-557d-ae33-9138f74db17f", "target_ref": "attack-pattern--093e472c-281c-5e78-9228-486255d3058a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--466a70cc-801f-5877-aeae-08ee7c463c9c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--25fe6d24-4133-557d-ae33-9138f74db17f", "target_ref": "attack-pattern--c6390ae8-9835-52c2-8fd7-fac5b37acc18" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0a823b17-bf79-58d8-b468-904ca4214376", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--a30a082c-da90-55b8-99b1-54b832e1d0d2", "target_ref": "attack-pattern--2a21b0c6-c06c-5130-9114-0d760dcb5b2c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--89701201-ae47-5999-b5d5-9d49288263d7", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--a30a082c-da90-55b8-99b1-54b832e1d0d2", "target_ref": "attack-pattern--7861ffbc-2d68-5482-ba5f-32e5a630a7a6" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e9e03186-65a6-5f84-a4c3-ea62dc5df819", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--a30a082c-da90-55b8-99b1-54b832e1d0d2", "target_ref": "attack-pattern--f0e70cea-8e64-51c4-9f64-09ea2bf642aa" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ca0ac045-cb82-52f2-8d2f-ea8d3c6e5fc7", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--a30a082c-da90-55b8-99b1-54b832e1d0d2", "target_ref": "attack-pattern--77b517cc-4b13-5a1b-8262-fb171254ddb5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ec05494d-eb96-573f-b931-1fa10186f2b7", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--a30a082c-da90-55b8-99b1-54b832e1d0d2", "target_ref": "attack-pattern--093e472c-281c-5e78-9228-486255d3058a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--649785f9-3564-5dc1-b1fe-327a09a2a125", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--a30a082c-da90-55b8-99b1-54b832e1d0d2", "target_ref": "attack-pattern--c6390ae8-9835-52c2-8fd7-fac5b37acc18" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8755b31e-49d1-5782-aee3-dacd6995d2dc", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--a30a082c-da90-55b8-99b1-54b832e1d0d2", "target_ref": "attack-pattern--bf6ef44d-fa93-5733-862a-26c1ac15a4b4" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--abc1b98f-21bc-5bb8-a468-8f4833cc0e47", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--55394f26-9bad-5baa-8ebc-ae1355abbd20", "target_ref": "attack-pattern--ff6b56c9-5bc9-5111-be9b-aa70a55951f1" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--43ad30a1-a05b-5875-90b0-237e0c882d09", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--55394f26-9bad-5baa-8ebc-ae1355abbd20", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--de82cc09-77f1-5c38-a785-f45fcd5c7a2b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--0ec08dc8-647b-5d3f-afcf-8040391ed1ba", "target_ref": "attack-pattern--1a600b6f-3cbd-5141-822e-9577e857e9ec" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--634eeafd-0ed0-5df5-ba02-edd7876394a1", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--0ec08dc8-647b-5d3f-afcf-8040391ed1ba", "target_ref": "attack-pattern--9b65ffc8-0be6-5809-b228-a85033f790ba" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--21077b2a-28f5-558f-96de-d038a7484a66", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--08fdc0fb-8695-5a6b-a38e-1ad295291bc1", "target_ref": "attack-pattern--e45221c4-74e9-52ab-8e20-96d05003d65a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--57d103e2-4cd8-5be2-8261-00fc36f25a7d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--08fdc0fb-8695-5a6b-a38e-1ad295291bc1", "target_ref": "attack-pattern--b027592f-baee-5d2a-9d15-925aa1b77941" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7cc097a1-f00e-5081-800a-5e12b7b6b3ad", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--08fdc0fb-8695-5a6b-a38e-1ad295291bc1", "target_ref": "attack-pattern--921bd515-01df-5ee1-a643-7138f8d1ee7c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--10ab2066-e878-5a21-b9a7-15e296d9372d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--08fdc0fb-8695-5a6b-a38e-1ad295291bc1", "target_ref": "attack-pattern--5deeb2fb-1df3-5566-8229-2e83bd241a08" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--03641ea5-9df2-5be4-94d1-b2aacd41da86", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--34ea78e4-ac9e-5f15-9db7-1734a31b0e65", "target_ref": "attack-pattern--2a21b0c6-c06c-5130-9114-0d760dcb5b2c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--772a3be4-42e0-52b7-b655-8ea6ac2af9b6", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--34ea78e4-ac9e-5f15-9db7-1734a31b0e65", "target_ref": "attack-pattern--94a03321-bd42-5ba5-a14c-869236fb3822" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3c558ec8-c02b-565d-853d-255e6e2613ce", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--34ea78e4-ac9e-5f15-9db7-1734a31b0e65", "target_ref": "attack-pattern--a7929123-b1d5-5eee-b042-dc7812bdd713" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--94207f34-ed70-5c50-959d-37f44244394f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--34ea78e4-ac9e-5f15-9db7-1734a31b0e65", "target_ref": "x-oak-tactic--462dc46f-d3c8-5956-9fcd-83fd745b277a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--76bafc90-145b-5129-b799-3fb1122b4226", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--34ea78e4-ac9e-5f15-9db7-1734a31b0e65", "target_ref": "x-oak-tactic--5fc49855-8bca-5500-b810-322019badf15" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a1e121ee-2d3f-51ea-b245-99949e1b0be3", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--0d484de6-67e9-548c-a3bb-4b79f367d70f", "target_ref": "attack-pattern--cf39fa63-9044-5279-8ea5-4acb64d53904" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--63856664-d900-5bc7-81e6-4225ed8aad7c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--0d484de6-67e9-548c-a3bb-4b79f367d70f", "target_ref": "attack-pattern--78f0aa7b-06b4-5266-b348-58db62932a71" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--129ca3ed-8dd4-53d6-a5dc-f22414bc9dc2", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--0d484de6-67e9-548c-a3bb-4b79f367d70f", "target_ref": "attack-pattern--5deeb2fb-1df3-5566-8229-2e83bd241a08" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9fd7201f-b68a-5153-9e04-39e54d089c2d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--03943af6-56ff-534e-aa7b-1608d079df7b", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ccff4992-85b5-5f68-8912-5c92bd3b99a8", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--03943af6-56ff-534e-aa7b-1608d079df7b", "target_ref": "attack-pattern--f81933a4-bfe2-528f-94ef-399577e5a682" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a19a2799-9b73-5d6c-adb9-87e4a6eb7369", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--03943af6-56ff-534e-aa7b-1608d079df7b", "target_ref": "attack-pattern--fd40fed2-9093-5b5a-8ebd-5b288e3ae6c5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--68edce17-05ad-5db1-b48c-4d76743ec31a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--03943af6-56ff-534e-aa7b-1608d079df7b", "target_ref": "attack-pattern--8fea3d14-6b55-534c-986e-1c6f3d1638f2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--156f363c-e5d2-55ae-9e57-cd063d67219f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--03943af6-56ff-534e-aa7b-1608d079df7b", "target_ref": "attack-pattern--e9d0e479-5424-55c4-ab48-976a7a671010" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6bdefefc-b44e-5466-a60f-eff182c108ce", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--bda0dbeb-4284-5825-819b-0458d01532eb", "target_ref": "attack-pattern--c6390ae8-9835-52c2-8fd7-fac5b37acc18" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9c9c8885-742e-5b36-880c-dd2a12f5765d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--bda0dbeb-4284-5825-819b-0458d01532eb", "target_ref": "attack-pattern--fd40fed2-9093-5b5a-8ebd-5b288e3ae6c5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--fe3c41df-0076-5ad8-ba94-0d812f585927", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--8cb2fbdf-79e5-5ba7-8efd-33d149c045e8", "target_ref": "attack-pattern--473b0aa4-1cea-57d5-a0a1-9114ebeb1de6" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--dac70d85-8e6d-595c-b88d-79aacfff6101", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--8cb2fbdf-79e5-5ba7-8efd-33d149c045e8", "target_ref": "attack-pattern--fe838439-8aa4-5b23-9494-fde9e1d5637c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a05a8afd-08ca-53a0-8069-ebea8ac13d0e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--8cb2fbdf-79e5-5ba7-8efd-33d149c045e8", "target_ref": "attack-pattern--9b65ffc8-0be6-5809-b228-a85033f790ba" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--860f62c1-1bdc-580b-a0f9-f16bb0c144b5", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--99d9f2dd-23d5-5a74-8fcf-dd9c1138f0b0", "target_ref": "attack-pattern--bf6ef44d-fa93-5733-862a-26c1ac15a4b4" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a5e21409-7d14-59f8-8db1-078c11c47523", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--105c550e-d53d-5a36-b28f-49a123c0e921", "target_ref": "attack-pattern--b0b659a0-71d1-5943-b57e-96082367adef" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--004934aa-3c33-5ee0-87bd-44847a3af3ae", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--105c550e-d53d-5a36-b28f-49a123c0e921", "target_ref": "attack-pattern--5c19685a-578d-5a35-969d-4ad75a1ab78a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3f05628f-e757-5093-b11e-393c2460decb", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--012eeec8-d7b8-5f7a-94fb-f86fd6d8151b", "target_ref": "attack-pattern--9552d7a9-3083-569f-a641-d880fc8a27d5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--bc324935-bf3c-5ff9-b22a-a7c19158fa98", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--012eeec8-d7b8-5f7a-94fb-f86fd6d8151b", "target_ref": "attack-pattern--4dd355bc-2389-55c4-911c-1bac3744dbbc" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--aa49a9fa-904c-553f-a8c1-58de42b459fd", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--6415048c-5224-5269-a697-6117e7828d6e", "target_ref": "attack-pattern--03407478-76ff-57d8-bf96-1cb5b5108d9d" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--263c754d-181e-5972-a363-827c6114475a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--6415048c-5224-5269-a697-6117e7828d6e", "target_ref": "attack-pattern--523b3321-6fd3-5d53-b04e-bbd114e8f317" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--392068ce-6200-5699-8d32-7f5b1518fef9", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--6415048c-5224-5269-a697-6117e7828d6e", "target_ref": "attack-pattern--bf6ef44d-fa93-5733-862a-26c1ac15a4b4" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8810b9ca-b413-5579-a2aa-d38b9cb5341b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--bce2e173-91f9-58b1-93c8-7d6dbb847cba", "target_ref": "attack-pattern--f5bce1e3-3637-56df-8db9-94e793306171" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--562dcd37-2cfc-5317-ac92-5ca5a4d2d1d9", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--bce2e173-91f9-58b1-93c8-7d6dbb847cba", "target_ref": "attack-pattern--f81933a4-bfe2-528f-94ef-399577e5a682" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--febf6d86-6f39-5ccb-a06e-4031f987017b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--915c2f49-a421-5e5f-a30d-17b07601b96a", "target_ref": "attack-pattern--a7ebcbb2-dafe-5364-9932-e3d7bee02596" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4862c5f3-8852-5de0-83d5-3cce20cc17cb", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--9311f116-0e8d-5e95-bce7-224b257b9fce", "target_ref": "attack-pattern--980e72bb-7127-51de-9870-d8a88edc74f8" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a3918a1a-5606-5f3f-8189-45e1c6c6b941", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--9311f116-0e8d-5e95-bce7-224b257b9fce", "target_ref": "attack-pattern--0658ea79-01b4-5c49-bb12-4c6e0876df4e" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7d10401c-5025-5ddf-82ef-03d61436c15b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--9311f116-0e8d-5e95-bce7-224b257b9fce", "target_ref": "attack-pattern--80d7913d-0db0-5316-b436-9d914dd8669b" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6db7a74c-bc8c-53c1-b8be-01efaafe6937", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--1113ead5-679d-5564-a0b4-3bd765cdb648", "target_ref": "attack-pattern--7a7e61f2-3d7c-5d61-90dc-9e198573731c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--46b88052-b01a-5216-a08e-e2c54679b61c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--1113ead5-679d-5564-a0b4-3bd765cdb648", "target_ref": "attack-pattern--67bf8212-71d7-5c52-87fc-fa40b25fb11c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--71700652-f2eb-5d9d-8ded-52461543981d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--1113ead5-679d-5564-a0b4-3bd765cdb648", "target_ref": "attack-pattern--286d6367-67eb-51d1-8a4b-cb5bc3d012f4" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a373ab81-3056-5558-821e-5cc23cda2a53", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--1113ead5-679d-5564-a0b4-3bd765cdb648", "target_ref": "attack-pattern--ba1ed4a4-51a0-58c0-a6ea-3742137d79b9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--42f20698-213e-5d51-bfc0-d90c1d2edd14", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--1113ead5-679d-5564-a0b4-3bd765cdb648", "target_ref": "attack-pattern--fbe93b94-384c-543f-9ae9-a73850f14a4f" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f8741991-664f-5877-913c-248d62842e25", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--1113ead5-679d-5564-a0b4-3bd765cdb648", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6632eee2-f74d-54bb-b24f-fc6e1c67e3c5", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--257a278b-0c9c-545f-808f-2880ffed0b70", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6a50b778-82dd-5806-bf93-2c42016e32b6", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--257a278b-0c9c-545f-808f-2880ffed0b70", "target_ref": "attack-pattern--093e472c-281c-5e78-9228-486255d3058a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8c73a49e-d4f1-50c5-9c78-0a93685d67ec", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--257a278b-0c9c-545f-808f-2880ffed0b70", "target_ref": "attack-pattern--a7ebcbb2-dafe-5364-9932-e3d7bee02596" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a686571a-c96e-58d0-8c80-b10502548b3a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--257a278b-0c9c-545f-808f-2880ffed0b70", "target_ref": "attack-pattern--1d0e4f47-8c77-58a2-b885-f44145ed3bf4" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--13f768e2-ffc5-5fdf-be23-59e6cd34ff17", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--7ef3644e-3a54-5f61-a359-2b48af684150", "target_ref": "attack-pattern--f5bce1e3-3637-56df-8db9-94e793306171" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--569643c9-9a4c-56aa-9c3f-4d051b8d2c2f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--7ef3644e-3a54-5f61-a359-2b48af684150", "target_ref": "attack-pattern--f81933a4-bfe2-528f-94ef-399577e5a682" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9b6a3926-8036-544f-94fb-c00e07204332", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--7ef3644e-3a54-5f61-a359-2b48af684150", "target_ref": "attack-pattern--9b65ffc8-0be6-5809-b228-a85033f790ba" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--fefdd942-040d-5146-8d91-a5b385861f61", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--22fbf8c5-f050-5e67-a256-da0c3e8669d9", "target_ref": "attack-pattern--f5bce1e3-3637-56df-8db9-94e793306171" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--219f4abb-dc30-5bf2-9f97-497a94f33d38", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--22fbf8c5-f050-5e67-a256-da0c3e8669d9", "target_ref": "attack-pattern--f81933a4-bfe2-528f-94ef-399577e5a682" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--222518f8-4148-570c-b5dc-c0ffd97ed54c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--5f26dbbc-f13d-5202-a6ea-639bf5e68903", "target_ref": "attack-pattern--03407478-76ff-57d8-bf96-1cb5b5108d9d" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e55c89bd-5cf7-51d9-9c58-855d2a799113", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--5f26dbbc-f13d-5202-a6ea-639bf5e68903", "target_ref": "attack-pattern--cccae07c-951c-54bd-bfa4-af87de266370" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c727710d-ef17-57d0-a512-b64d16e32f17", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--5f26dbbc-f13d-5202-a6ea-639bf5e68903", "target_ref": "attack-pattern--f5bce1e3-3637-56df-8db9-94e793306171" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1c3f9fb2-8e23-50e6-bf87-723ad250d875", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--4f7bf872-470a-550e-ac0f-8341b9062b60", "target_ref": "attack-pattern--aa324a54-0e77-513e-bc77-dea4683702d2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a014a5fb-feea-5d2f-b4ec-f397aaf65f41", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--4f7bf872-470a-550e-ac0f-8341b9062b60", "target_ref": "attack-pattern--39564b4f-4af2-5b1a-8405-eb8cf9d2f12b" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--300d6d16-c6bd-5b4c-9b77-dde4a4c7f2cf", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--4f7bf872-470a-550e-ac0f-8341b9062b60", "target_ref": "attack-pattern--cccae07c-951c-54bd-bfa4-af87de266370" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--83320d22-a62b-59ab-9a48-cfad0578d0e3", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--4f7bf872-470a-550e-ac0f-8341b9062b60", "target_ref": "x-oak-tactic--7fa7f00b-059a-5a92-b145-0893b4530bb6" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8bd067b2-9932-5d76-9f32-30de6b2b6b56", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--1d4b5d8c-39b4-51a6-a201-a54d4e91d906", "target_ref": "attack-pattern--1a600b6f-3cbd-5141-822e-9577e857e9ec" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b12a146d-c5ef-5817-86d6-d9cb2e6d08b2", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--1d4b5d8c-39b4-51a6-a201-a54d4e91d906", "target_ref": "attack-pattern--9b65ffc8-0be6-5809-b228-a85033f790ba" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c4b245f6-5245-5e68-8880-7977621b8578", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--dd43a7d4-c748-5cfb-a87f-b012195f56e3", "target_ref": "attack-pattern--093e472c-281c-5e78-9228-486255d3058a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c09d1672-1f8e-5436-b515-b5aec038d181", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--dd43a7d4-c748-5cfb-a87f-b012195f56e3", "target_ref": "attack-pattern--fd40fed2-9093-5b5a-8ebd-5b288e3ae6c5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4bb3dd48-91a8-579f-9e9a-b10b0ba288fe", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--940f0e40-d4d7-54a4-83e2-71fa159cc5fa", "target_ref": "x-oak-tactic--3ec189b1-7483-5eec-bd93-b8191e1c508c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b3510cda-411c-5383-8659-6a88dd30f972", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--940f0e40-d4d7-54a4-83e2-71fa159cc5fa", "target_ref": "attack-pattern--320f06d5-906a-5b2f-a737-01b09ce60315" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--420a616a-1218-57c6-b257-559a89e74020", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--940f0e40-d4d7-54a4-83e2-71fa159cc5fa", "target_ref": "attack-pattern--58002197-8183-530c-9eea-d2d8532a9008" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0842e67f-3f19-58c1-858e-9eeef478a41f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--940f0e40-d4d7-54a4-83e2-71fa159cc5fa", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--45b66bce-7bf1-50c0-89ab-a02e7a41e92d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--92e5dfd0-8ece-518e-9949-8f8acabafcfc", "target_ref": "attack-pattern--58002197-8183-530c-9eea-d2d8532a9008" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3c9bec08-1a25-5278-a47b-a8da381882f7", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--92e5dfd0-8ece-518e-9949-8f8acabafcfc", "target_ref": "attack-pattern--92ca3ca4-e512-53c5-be45-1f8b05cc913b" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--54935bac-4bb4-574a-9abc-66685429be69", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--92e5dfd0-8ece-518e-9949-8f8acabafcfc", "target_ref": "attack-pattern--419b5ccf-6a56-5639-a130-82e3f14a544e" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--79b67628-49f5-5137-9fa5-d1459cb6ca10", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--92e5dfd0-8ece-518e-9949-8f8acabafcfc", "target_ref": "x-oak-tactic--7fa7f00b-059a-5a92-b145-0893b4530bb6" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8575b8c9-df36-5310-9f02-48fea9c1000a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--92e5dfd0-8ece-518e-9949-8f8acabafcfc", "target_ref": "attack-pattern--bf6ef44d-fa93-5733-862a-26c1ac15a4b4" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5522f5e5-0baa-573f-80a0-5e1694476059", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--92e5dfd0-8ece-518e-9949-8f8acabafcfc", "target_ref": "attack-pattern--1d0e4f47-8c77-58a2-b885-f44145ed3bf4" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7563a737-1b24-5734-b013-f336b579c2af", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--be64f59b-1486-5227-8579-03ab420fde4b", "target_ref": "attack-pattern--cf39fa63-9044-5279-8ea5-4acb64d53904" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b16fb324-77bb-5857-b1b2-06adc00ed6bd", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--be64f59b-1486-5227-8579-03ab420fde4b", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2f016ee9-731d-537f-8db8-31c8a84ab24a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--be64f59b-1486-5227-8579-03ab420fde4b", "target_ref": "attack-pattern--9b65ffc8-0be6-5809-b228-a85033f790ba" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--fcf8a224-7751-5d05-ab2a-59958fc472be", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--9c866a99-20d9-56ac-aab0-ad8010e921d0", "target_ref": "attack-pattern--d56864b8-d792-56b8-8190-be436238825d" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0b234cf4-77c3-5641-9da9-1ad7306e148c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--9c866a99-20d9-56ac-aab0-ad8010e921d0", "target_ref": "attack-pattern--4cad59ea-0942-5afc-a239-32ab4e740836" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--dfecdaea-ee28-5d0d-a078-52c54e325a27", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--9c866a99-20d9-56ac-aab0-ad8010e921d0", "target_ref": "attack-pattern--77b517cc-4b13-5a1b-8262-fb171254ddb5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0a898730-6df7-57eb-a321-317b52df897d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--e53278dd-3b96-5d6a-8f42-2f4fa4d05c84", "target_ref": "x-oak-tactic--4a289ef4-441e-58b3-869d-49ccfdee57a4" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--43a53ec2-5a65-56bf-a053-532b29457044", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--e53278dd-3b96-5d6a-8f42-2f4fa4d05c84", "target_ref": "attack-pattern--f7bfa62c-b23c-5fef-a74b-bca3b34cf4df" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--93e7861c-0b89-54e3-bfbe-46f2cda4d690", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--e53278dd-3b96-5d6a-8f42-2f4fa4d05c84", "target_ref": "attack-pattern--7861ffbc-2d68-5482-ba5f-32e5a630a7a6" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--483ab210-ac60-5603-acc2-cbc4d0b586f0", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--e53278dd-3b96-5d6a-8f42-2f4fa4d05c84", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--074db979-4bda-58af-a04c-73daab30e788", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--e53278dd-3b96-5d6a-8f42-2f4fa4d05c84", "target_ref": "attack-pattern--9b65ffc8-0be6-5809-b228-a85033f790ba" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--47583136-2413-5e69-8115-fb1b7f61c8cb", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--1ea403f8-751a-5b3f-8621-87f821d189b6", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--27e57640-7490-570a-87c4-6e0e89367808", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--1ea403f8-751a-5b3f-8621-87f821d189b6", "target_ref": "attack-pattern--f81933a4-bfe2-528f-94ef-399577e5a682" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5d16c6c0-1ff3-582f-813b-856acd043d85", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--1ea403f8-751a-5b3f-8621-87f821d189b6", "target_ref": "attack-pattern--fd40fed2-9093-5b5a-8ebd-5b288e3ae6c5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0ebc8eb8-95ef-5cd8-b084-034197f68dfc", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--1ea403f8-751a-5b3f-8621-87f821d189b6", "target_ref": "attack-pattern--8fea3d14-6b55-534c-986e-1c6f3d1638f2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ac6886bf-343e-581f-a0bf-3f798e8a5c4e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--1a3327a2-8736-5138-b366-a786170d6547", "target_ref": "x-oak-tactic--a05710d6-773d-5671-81e6-1a9d53ce156a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--54c03919-02ac-59b6-a3a9-fc5bfb05f1a1", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--1a3327a2-8736-5138-b366-a786170d6547", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5523b263-3797-5f0f-9521-d7551db2e4d9", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--1a3327a2-8736-5138-b366-a786170d6547", "target_ref": "attack-pattern--093e472c-281c-5e78-9228-486255d3058a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--50348c36-b2ff-53f9-9061-7c474436a363", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--35d661da-f4b8-5d0a-a3f7-1a089af99f04", "target_ref": "attack-pattern--b8d62a9c-14cd-503a-af8d-a26b825dffcd" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--08d76f75-fb4d-5183-b8fc-4c505f1cd8f7", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--35d661da-f4b8-5d0a-a3f7-1a089af99f04", "target_ref": "attack-pattern--921bd515-01df-5ee1-a643-7138f8d1ee7c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--47cc6004-3126-55bb-b56f-375c701d4e03", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--403512a9-76ff-590c-964a-508d79dad58a", "target_ref": "attack-pattern--e3ca28d4-2eb0-5329-96df-65f6a1363709" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a5bf0cde-1ef6-53d3-b62c-d14dee9900dd", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--403512a9-76ff-590c-964a-508d79dad58a", "target_ref": "attack-pattern--f5bce1e3-3637-56df-8db9-94e793306171" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--69e9418c-d02d-5ec5-a713-fa8b8f39c156", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--403512a9-76ff-590c-964a-508d79dad58a", "target_ref": "attack-pattern--fd40fed2-9093-5b5a-8ebd-5b288e3ae6c5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e07de773-c242-51d9-b08e-fe95e4576b13", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--ea60fbbf-22df-554f-863c-01e5cb5c4dcb", "target_ref": "attack-pattern--980e72bb-7127-51de-9870-d8a88edc74f8" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--fa2e18dd-a2b2-5a0c-a641-11c5e7af8832", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--ea60fbbf-22df-554f-863c-01e5cb5c4dcb", "target_ref": "attack-pattern--0658ea79-01b4-5c49-bb12-4c6e0876df4e" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--97977916-1f8e-55a3-814b-a3ba7397f5b3", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--ea60fbbf-22df-554f-863c-01e5cb5c4dcb", "target_ref": "attack-pattern--846cf1ff-739a-5199-abd6-5f09cc1aeeb0" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5a713751-4fc6-5030-9415-d867880e9e8e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--ea60fbbf-22df-554f-863c-01e5cb5c4dcb", "target_ref": "attack-pattern--fe838439-8aa4-5b23-9494-fde9e1d5637c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c994aa4d-a602-5dd7-85e1-8d3f79fa2de2", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--ea60fbbf-22df-554f-863c-01e5cb5c4dcb", "target_ref": "attack-pattern--f5bce1e3-3637-56df-8db9-94e793306171" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--336f4eb6-744c-5a34-8eca-f3a8685f57dc", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--f9e9c96e-5d5d-55c5-a139-9a5739f77289", "target_ref": "attack-pattern--b0b659a0-71d1-5943-b57e-96082367adef" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--fe710802-9844-54e4-aa85-ed2912bd5ce3", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--f9e9c96e-5d5d-55c5-a139-9a5739f77289", "target_ref": "attack-pattern--b10815cf-cfad-5b45-97a2-61614ce86053" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--fadc2070-5227-5451-ac16-34bd12400a49", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--f445abe7-8d2d-592b-ad67-1cc460b67c26", "target_ref": "x-oak-tactic--a05710d6-773d-5671-81e6-1a9d53ce156a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7eacde72-262c-5a4c-b485-5f5f3eacc3d7", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--f445abe7-8d2d-592b-ad67-1cc460b67c26", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--97597168-adc4-5363-989e-b027ff3246e5", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--f445abe7-8d2d-592b-ad67-1cc460b67c26", "target_ref": "attack-pattern--bf6ef44d-fa93-5733-862a-26c1ac15a4b4" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--28730e91-fc54-5eae-8e7e-54bbde488285", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--6a774ca5-45cc-5fa9-b93a-fc92d5f4aaaf", "target_ref": "attack-pattern--a55b5859-fa73-5cab-a342-82b97187ea20" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--691bbfcc-f6c4-53f7-8c24-b922487c1c5f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--6a774ca5-45cc-5fa9-b93a-fc92d5f4aaaf", "target_ref": "attack-pattern--5deeb2fb-1df3-5566-8229-2e83bd241a08" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f6f519fb-a852-5e18-ac5f-725ec6b71136", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--6a774ca5-45cc-5fa9-b93a-fc92d5f4aaaf", "target_ref": "attack-pattern--d9e4a005-06a9-5cee-9f7c-234e20790118" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6295bb53-e540-56a0-b0a7-a6237b18af52", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--6a774ca5-45cc-5fa9-b93a-fc92d5f4aaaf", "target_ref": "attack-pattern--c23370e0-2f94-555e-8e18-e753a767bb51" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3e6cfa2e-937d-5ed1-afea-084e37a062ea", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--6a774ca5-45cc-5fa9-b93a-fc92d5f4aaaf", "target_ref": "attack-pattern--d275621f-df75-55ac-974a-4589472dde87" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d5febe8e-a3f1-5568-b38b-05a27b09bd5c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--6a774ca5-45cc-5fa9-b93a-fc92d5f4aaaf", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--95152e1f-10fe-581a-9e21-24e83403f37f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--fdd82ae4-28a8-5c4a-bc51-48b3b22d0b35", "target_ref": "attack-pattern--7a7e61f2-3d7c-5d61-90dc-9e198573731c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9a7b923f-714a-5f42-b384-4a215c85a946", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--fdd82ae4-28a8-5c4a-bc51-48b3b22d0b35", "target_ref": "attack-pattern--fbe93b94-384c-543f-9ae9-a73850f14a4f" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9fd46f8e-3a16-5c19-9782-f5f3e2f56ebb", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--fdd82ae4-28a8-5c4a-bc51-48b3b22d0b35", "target_ref": "attack-pattern--e12a0e1d-8dac-5395-b37b-b0aa20814db2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--78e3ceba-107a-586f-be8f-5c2f45a5dc3a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--fdd82ae4-28a8-5c4a-bc51-48b3b22d0b35", "target_ref": "attack-pattern--fd40fed2-9093-5b5a-8ebd-5b288e3ae6c5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--dec5f385-3fef-58a0-ab53-19d23ca8e230", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--6834718b-cfa5-54dd-a294-420a55e162b2", "target_ref": "attack-pattern--2a21b0c6-c06c-5130-9114-0d760dcb5b2c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f45613bf-9159-568b-8ce9-2717f0ee77eb", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--6834718b-cfa5-54dd-a294-420a55e162b2", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7de2df64-2af0-5211-94d4-a23d10dff8bb", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--a3851fe7-6ada-5195-ad9f-fbd506d80b47", "target_ref": "attack-pattern--cf39fa63-9044-5279-8ea5-4acb64d53904" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1a7d87d4-881f-552e-bea0-836d5daf78e5", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--a3851fe7-6ada-5195-ad9f-fbd506d80b47", "target_ref": "attack-pattern--b19923a2-b45b-5106-935d-f52d0d875a94" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7633a356-88de-5dec-af1d-86437e57a94d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--a3851fe7-6ada-5195-ad9f-fbd506d80b47", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4b6632e8-deee-5df0-a896-e8429b9f9cfd", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--a3851fe7-6ada-5195-ad9f-fbd506d80b47", "target_ref": "attack-pattern--f81933a4-bfe2-528f-94ef-399577e5a682" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ce4833c3-43f5-590c-a726-a2f822b355cf", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--a3851fe7-6ada-5195-ad9f-fbd506d80b47", "target_ref": "attack-pattern--9b65ffc8-0be6-5809-b228-a85033f790ba" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--09cc3e85-312f-5cbd-abdf-9832b5946ba5", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--5379ddee-2501-5474-af7f-83b32079987a", "target_ref": "attack-pattern--980e72bb-7127-51de-9870-d8a88edc74f8" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--685d3835-c763-5d47-99da-fed3f3d43d4e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--5379ddee-2501-5474-af7f-83b32079987a", "target_ref": "attack-pattern--0658ea79-01b4-5c49-bb12-4c6e0876df4e" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7f16802e-fda5-54c7-9a3c-5e43b3fa7b9b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--9fce1657-3c87-54be-97a4-3c660d074335", "target_ref": "attack-pattern--2a21b0c6-c06c-5130-9114-0d760dcb5b2c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--10f5738e-9231-5607-b750-0cc2d45b14a6", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--9fce1657-3c87-54be-97a4-3c660d074335", "target_ref": "attack-pattern--7861ffbc-2d68-5482-ba5f-32e5a630a7a6" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--fb41636b-0852-5b42-9456-4c4d4a835fa3", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--9fce1657-3c87-54be-97a4-3c660d074335", "target_ref": "attack-pattern--9b65ffc8-0be6-5809-b228-a85033f790ba" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--95a8b469-9aca-5540-b282-6f99d89ce1bc", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--64598ab6-1a92-5ccd-bf38-93df973fe771", "target_ref": "attack-pattern--9552d7a9-3083-569f-a641-d880fc8a27d5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9faea3dd-2442-5819-ba26-3696d498e15d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--64598ab6-1a92-5ccd-bf38-93df973fe771", "target_ref": "attack-pattern--e66a56f1-221e-5079-bfe4-99ccbe842a5a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--334dd417-0859-55f8-b419-81d2479de3ef", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--64598ab6-1a92-5ccd-bf38-93df973fe771", "target_ref": "attack-pattern--9b65ffc8-0be6-5809-b228-a85033f790ba" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--379f3f97-5c7c-50c0-853a-ab39da0e5e45", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--0df80b0c-efa7-5ed3-a52d-6c39284cc3db", "target_ref": "attack-pattern--cf39fa63-9044-5279-8ea5-4acb64d53904" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a7a6a4d2-356b-5a9e-a3ab-537e5f78ce65", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--0df80b0c-efa7-5ed3-a52d-6c39284cc3db", "target_ref": "attack-pattern--9b65ffc8-0be6-5809-b228-a85033f790ba" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8f17d5ce-ab5a-56b9-9e48-2087c5fadfda", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--8405560b-b03c-52fc-96ac-91c083f3beb7", "target_ref": "attack-pattern--f43b3cdc-ed19-5ad0-b661-706c665d9f83" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--140ee97f-bd7f-5bb4-8249-5625b9426fc9", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--8405560b-b03c-52fc-96ac-91c083f3beb7", "target_ref": "attack-pattern--a9cff60c-a2e1-5a72-ad92-358506cc8678" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7c729bb2-99ce-507a-925d-2d1efabe5d51", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--8405560b-b03c-52fc-96ac-91c083f3beb7", "target_ref": "x-oak-tactic--805d835b-8d16-5215-ab2a-a5a008681adb" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a8f392fd-3338-598e-a351-d9a7231957db", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--8405560b-b03c-52fc-96ac-91c083f3beb7", "target_ref": "x-oak-tactic--5fc49855-8bca-5500-b810-322019badf15" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9b411132-ad5a-58db-b2b1-329f007bd937", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--8405560b-b03c-52fc-96ac-91c083f3beb7", "target_ref": "x-oak-tactic--d70463dd-edee-5226-9d2b-4921dac73b9b" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--91c5a5e7-45a3-540f-b235-201ac965cedf", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--ff7ff121-0821-52c9-a04a-8e53bba226df", "target_ref": "attack-pattern--419b5ccf-6a56-5639-a130-82e3f14a544e" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f5444b98-0aa1-556e-86fb-77361c3da204", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--ff7ff121-0821-52c9-a04a-8e53bba226df", "target_ref": "attack-pattern--8e90a636-2bbf-5517-9dc5-1516e3ff0df6" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--716e86df-bf79-5984-9928-ab73a37dfdcc", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--a1fe2b47-27fa-5449-b21b-3578ad128c72", "target_ref": "attack-pattern--f81933a4-bfe2-528f-94ef-399577e5a682" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5fba5e22-4416-55e9-9cfb-d46e14ec0f46", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--a1fe2b47-27fa-5449-b21b-3578ad128c72", "target_ref": "attack-pattern--fd40fed2-9093-5b5a-8ebd-5b288e3ae6c5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7033b798-0b47-578f-892f-209c067b68ed", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--5241876f-f5d6-5478-9a00-606676d67af2", "target_ref": "attack-pattern--473b0aa4-1cea-57d5-a0a1-9114ebeb1de6" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--cac8318f-b38c-5107-9366-3cf69a1ac992", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--5241876f-f5d6-5478-9a00-606676d67af2", "target_ref": "attack-pattern--fe838439-8aa4-5b23-9494-fde9e1d5637c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4449d3ab-3da2-529c-9054-57640f4803d9", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--5241876f-f5d6-5478-9a00-606676d67af2", "target_ref": "attack-pattern--3419f870-c58f-5b87-b67d-829b01e4d724" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--095f30c6-aa05-5d0f-a67b-6ed2003eaed9", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--5241876f-f5d6-5478-9a00-606676d67af2", "target_ref": "attack-pattern--bf6ef44d-fa93-5733-862a-26c1ac15a4b4" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b9a24282-d932-55bc-8772-003383383e4c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--2c83a140-b4f0-56d6-9b97-a4a5a53ab5db", "target_ref": "attack-pattern--0955e8c5-f474-5ac6-bbb8-b53b80ef6c0b" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a11d6a2d-a443-5f27-949c-9394ecd32cfe", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--2c83a140-b4f0-56d6-9b97-a4a5a53ab5db", "target_ref": "attack-pattern--79d99263-2431-5abd-bf5f-2869979031be" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4dd0b844-2754-520a-9150-9eed31d18396", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--a9bc9cd3-6ed0-5f3d-a826-3bc090bf0c54", "target_ref": "attack-pattern--e45221c4-74e9-52ab-8e20-96d05003d65a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4ec7b752-e2e7-5cbe-a2e6-0e7884df3197", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--a9bc9cd3-6ed0-5f3d-a826-3bc090bf0c54", "target_ref": "attack-pattern--39564b4f-4af2-5b1a-8405-eb8cf9d2f12b" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f5bb220f-77a9-5127-8bc2-aa98317930e3", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--a9bc9cd3-6ed0-5f3d-a826-3bc090bf0c54", "target_ref": "attack-pattern--b027592f-baee-5d2a-9d15-925aa1b77941" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--93a74405-60e5-5ddb-af5e-827919614f05", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--a9bc9cd3-6ed0-5f3d-a826-3bc090bf0c54", "target_ref": "attack-pattern--5deeb2fb-1df3-5566-8229-2e83bd241a08" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b5c6b622-fbe9-51e8-9dcb-84276ebd9e2e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--bf5e9b35-e7ec-553c-a91f-04a8734e6b1b", "target_ref": "attack-pattern--b0b659a0-71d1-5943-b57e-96082367adef" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9015843f-0925-5dba-ae2d-fc6e69424e22", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--bf5e9b35-e7ec-553c-a91f-04a8734e6b1b", "target_ref": "attack-pattern--5c19685a-578d-5a35-969d-4ad75a1ab78a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f390543f-cc8e-5bbb-88c0-3e0be7d83a0d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--bf5e9b35-e7ec-553c-a91f-04a8734e6b1b", "target_ref": "attack-pattern--b10815cf-cfad-5b45-97a2-61614ce86053" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c3b8f676-f2ff-5a95-873e-c72786e80763", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--635ac831-1c10-5c7b-a97f-3d0925323b96", "target_ref": "attack-pattern--ad24b94c-0c7f-5bac-bd56-cf837da9180b" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--554a1441-c332-5ed8-acc1-7b2d45555e95", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--635ac831-1c10-5c7b-a97f-3d0925323b96", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--48f1326d-26d1-565a-9b10-8e9036de43a0", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--635ac831-1c10-5c7b-a97f-3d0925323b96", "target_ref": "attack-pattern--093e472c-281c-5e78-9228-486255d3058a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f0e8da21-220c-5805-a480-f0c7c300da98", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--635ac831-1c10-5c7b-a97f-3d0925323b96", "target_ref": "attack-pattern--9b65ffc8-0be6-5809-b228-a85033f790ba" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--bc5cb647-35c3-5e0f-9abf-ce24381b5ccd", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--e419b0df-f583-5075-8e0e-d405b16629c7", "target_ref": "attack-pattern--e66a56f1-221e-5079-bfe4-99ccbe842a5a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b0ef1b1e-dbcf-5376-83f8-bac6ab73f267", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--e419b0df-f583-5075-8e0e-d405b16629c7", "target_ref": "attack-pattern--d9e4a005-06a9-5cee-9f7c-234e20790118" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a74ddcd9-80f3-5dd4-b1f8-ff3d0b2e512b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--e419b0df-f583-5075-8e0e-d405b16629c7", "target_ref": "attack-pattern--3be95af9-48b3-56a3-8e57-f07ac58e27f2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--be9726d0-0995-59a0-98ee-7ab4397ccaf0", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--e419b0df-f583-5075-8e0e-d405b16629c7", "target_ref": "attack-pattern--9b65ffc8-0be6-5809-b228-a85033f790ba" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1c6e3645-1c85-5149-b827-c8ed2596ac1e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--e419b0df-f583-5075-8e0e-d405b16629c7", "target_ref": "attack-pattern--3a083d84-7478-5068-afe8-ad797d870993" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7d52711d-d130-51bd-9f5f-ae06d80b6134", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--74e4ea3c-f025-57bd-b461-17d6d2dc40e9", "target_ref": "attack-pattern--5c19685a-578d-5a35-969d-4ad75a1ab78a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5699569a-96c0-5ae4-b27b-c28ee4386d7a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--74e4ea3c-f025-57bd-b461-17d6d2dc40e9", "target_ref": "attack-pattern--b10815cf-cfad-5b45-97a2-61614ce86053" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7c37c5e0-cced-55c1-9a50-faccfe837fb6", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--74e4ea3c-f025-57bd-b461-17d6d2dc40e9", "target_ref": "attack-pattern--f783bf18-a6db-5a11-bcbf-3ad4892f9214" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--49982ea3-0ff6-5608-844b-cbbb902a3024", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--74e4ea3c-f025-57bd-b461-17d6d2dc40e9", "target_ref": "attack-pattern--6cd5a72f-146d-5a9f-8324-beebe7a70c42" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--14de69fa-7652-5f6a-ac82-1f13e147f6ac", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--b313f45b-1458-5c00-b8e4-8e83dbab09cf", "target_ref": "attack-pattern--b0b659a0-71d1-5943-b57e-96082367adef" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3d7deae8-0991-521a-aee8-d88875e983db", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--b313f45b-1458-5c00-b8e4-8e83dbab09cf", "target_ref": "attack-pattern--f783bf18-a6db-5a11-bcbf-3ad4892f9214" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4ccd3f34-2a26-5f9c-a5d0-b0f909336ff6", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--1308fe73-04f5-5ad7-a6eb-844690181598", "target_ref": "attack-pattern--fef61756-5074-52ac-8731-3cd76a564130" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3586c57d-a0fd-51a5-a424-1039db84c9f2", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--56a0c0db-844b-5633-b589-2684d40910ad", "target_ref": "attack-pattern--8477975b-da56-555e-8bc4-de888d978403" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--12acf2cf-ed4a-513c-bdca-70d19206db53", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--7e86099f-d1e4-57ba-ada7-9b9b9ef2cbff", "target_ref": "attack-pattern--2a21b0c6-c06c-5130-9114-0d760dcb5b2c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--de439a21-eb57-596e-aaf1-67dabb5ade72", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--7e86099f-d1e4-57ba-ada7-9b9b9ef2cbff", "target_ref": "attack-pattern--f7bfa62c-b23c-5fef-a74b-bca3b34cf4df" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--be632f68-b707-5f99-a982-adcde393d008", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--7e86099f-d1e4-57ba-ada7-9b9b9ef2cbff", "target_ref": "attack-pattern--f0e70cea-8e64-51c4-9f64-09ea2bf642aa" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--68fe30d9-caa4-5051-8c00-929759ab806e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--7e86099f-d1e4-57ba-ada7-9b9b9ef2cbff", "target_ref": "attack-pattern--03407478-76ff-57d8-bf96-1cb5b5108d9d" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--555bfa55-be20-58fa-9bcc-a5a6cc823455", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--7e86099f-d1e4-57ba-ada7-9b9b9ef2cbff", "target_ref": "attack-pattern--e66a56f1-221e-5079-bfe4-99ccbe842a5a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4a264a57-9a0e-5046-a280-4a49c698bc68", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--7e86099f-d1e4-57ba-ada7-9b9b9ef2cbff", "target_ref": "attack-pattern--cccae07c-951c-54bd-bfa4-af87de266370" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b2f72e00-131a-54b7-88ea-b541097f48e1", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--7e86099f-d1e4-57ba-ada7-9b9b9ef2cbff", "target_ref": "attack-pattern--f5bce1e3-3637-56df-8db9-94e793306171" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--de903239-add3-5933-a31e-febb0b84a7da", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--7e86099f-d1e4-57ba-ada7-9b9b9ef2cbff", "target_ref": "attack-pattern--9b65ffc8-0be6-5809-b228-a85033f790ba" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e37d99c1-49c4-56bc-8db1-ff59aa4f5d10", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--7e86099f-d1e4-57ba-ada7-9b9b9ef2cbff", "target_ref": "attack-pattern--e9d0e479-5424-55c4-ab48-976a7a671010" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2f131172-3470-5a61-9fe7-703c2205403b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--b5e13f2f-bc50-57e1-a431-eb3cec464128", "target_ref": "attack-pattern--093e472c-281c-5e78-9228-486255d3058a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2b774eeb-b1cf-5e75-b03f-232fd18cb040", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--b5e13f2f-bc50-57e1-a431-eb3cec464128", "target_ref": "attack-pattern--a7ebcbb2-dafe-5364-9932-e3d7bee02596" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--40f38869-e110-547f-9f69-1d1103594856", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--e1cdfcca-6fef-5d6a-a442-a37e0b8f3c70", "target_ref": "attack-pattern--e3ca28d4-2eb0-5329-96df-65f6a1363709" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--774d51a1-7f56-5a59-bf47-7874ee074996", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--e1cdfcca-6fef-5d6a-a442-a37e0b8f3c70", "target_ref": "attack-pattern--320f06d5-906a-5b2f-a737-01b09ce60315" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4aafc3e6-259e-52b5-90f5-ab3e894d1e4e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--e1cdfcca-6fef-5d6a-a442-a37e0b8f3c70", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--bb757495-fa91-53b4-b764-b237d894fcd1", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--e1cdfcca-6fef-5d6a-a442-a37e0b8f3c70", "target_ref": "attack-pattern--9b65ffc8-0be6-5809-b228-a85033f790ba" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d5dd9f66-70c2-540c-8551-4ec2bc76c113", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--5fb96e17-5424-5d92-8882-fa7ef94ec8d9", "target_ref": "attack-pattern--f65581dd-3a77-50d8-b85f-c0df5e90b22f" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--62e05592-eb9b-5d4b-9f2b-dc7a0a8a335e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--1ba6dfec-0831-58ff-a8ce-316d348322b5", "target_ref": "attack-pattern--414a6469-36be-5ecd-9603-290930d42b86" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6a7a173d-7115-5838-bd78-ce85a0fbd507", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--1ba6dfec-0831-58ff-a8ce-316d348322b5", "target_ref": "attack-pattern--f0e70cea-8e64-51c4-9f64-09ea2bf642aa" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2c676be4-ad1d-5e47-a3d7-ac1bc6ddee63", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--1ba6dfec-0831-58ff-a8ce-316d348322b5", "target_ref": "attack-pattern--78f0aa7b-06b4-5266-b348-58db62932a71" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--75a8db12-1448-5e07-ac33-a795cb9ff5b6", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--c052095c-c86c-522e-9e1a-ac3f1eed2a4b", "target_ref": "attack-pattern--b0b659a0-71d1-5943-b57e-96082367adef" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--65da54c8-f40c-570a-8d17-4b490b9a3707", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--c052095c-c86c-522e-9e1a-ac3f1eed2a4b", "target_ref": "attack-pattern--6cd5a72f-146d-5a9f-8324-beebe7a70c42" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1e2d98e6-a862-5a0e-bb9b-12286df20a0a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--94169a6c-a389-59d5-b8a0-f57b092d723c", "target_ref": "attack-pattern--a55b5859-fa73-5cab-a342-82b97187ea20" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8088872e-11d3-5b54-b50e-6a41598ede2f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--94169a6c-a389-59d5-b8a0-f57b092d723c", "target_ref": "attack-pattern--b8d62a9c-14cd-503a-af8d-a26b825dffcd" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5422fd67-4bbd-5107-9334-9c49ac6a66c6", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--94169a6c-a389-59d5-b8a0-f57b092d723c", "target_ref": "attack-pattern--5deeb2fb-1df3-5566-8229-2e83bd241a08" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b5ee1a08-c7b6-5407-839c-c51526d6cd5f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--0df5a10d-11e9-5b09-b1cf-5b92d576a04f", "target_ref": "attack-pattern--b0b659a0-71d1-5943-b57e-96082367adef" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--fac3edeb-ab50-557b-84db-d3ba6c348c00", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--0df5a10d-11e9-5b09-b1cf-5b92d576a04f", "target_ref": "attack-pattern--6cd5a72f-146d-5a9f-8324-beebe7a70c42" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--12c7ff5a-68f9-5bf4-9777-c8a1d3847fd3", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--b20287bf-48ab-5d7c-a2d9-08b01dab43f1", "target_ref": "attack-pattern--9b65ffc8-0be6-5809-b228-a85033f790ba" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d7fb52e5-bc62-5d11-b8a2-ba8711afdf6b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--b20287bf-48ab-5d7c-a2d9-08b01dab43f1", "target_ref": "attack-pattern--aad54a89-4a6f-5019-a80b-997786799f80" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--45f81689-64d4-5812-b1b7-4b9270e023ec", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--e48690f3-df76-54f0-9bc5-918b1ecbfdda", "target_ref": "attack-pattern--0658ea79-01b4-5c49-bb12-4c6e0876df4e" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0a2fafe5-d52f-54de-a16d-f2cd9b56d305", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--e48690f3-df76-54f0-9bc5-918b1ecbfdda", "target_ref": "attack-pattern--473b0aa4-1cea-57d5-a0a1-9114ebeb1de6" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b8d3a657-6803-5cc6-8925-1d5967056822", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--1932cbf3-564a-5871-9e52-c366de3744f2", "target_ref": "attack-pattern--9b65ffc8-0be6-5809-b228-a85033f790ba" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a733de27-d71d-5980-ae2a-8187d87890e6", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--ff017ac7-085e-5e25-92ab-7180d7ecaef2", "target_ref": "attack-pattern--980e72bb-7127-51de-9870-d8a88edc74f8" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--bd7453b8-515d-5ad4-86eb-df608ea0743d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--bc2e5973-68ab-502b-ad3e-4fbe29c1627a", "target_ref": "attack-pattern--b0b659a0-71d1-5943-b57e-96082367adef" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--da8043a7-31e5-5348-9150-d5954d4d7175", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--bc2e5973-68ab-502b-ad3e-4fbe29c1627a", "target_ref": "attack-pattern--f783bf18-a6db-5a11-bcbf-3ad4892f9214" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2d0051e1-633f-5375-866f-f2d9d870613a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--9bf4cd7b-b861-5830-9e52-db42657a9865", "target_ref": "x-oak-tactic--a05710d6-773d-5671-81e6-1a9d53ce156a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8fed6bff-b85c-5a63-96c8-f15a8ad4beb4", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--9bf4cd7b-b861-5830-9e52-db42657a9865", "target_ref": "attack-pattern--1a600b6f-3cbd-5141-822e-9577e857e9ec" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--94991d03-f26e-5181-b805-25bb29f34f35", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--b28552b6-0f43-5cd5-ae0f-b8886a9b5461", "target_ref": "attack-pattern--e45221c4-74e9-52ab-8e20-96d05003d65a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--97a0638e-c817-56fa-ab2b-a798d2cb3d65", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--b28552b6-0f43-5cd5-ae0f-b8886a9b5461", "target_ref": "attack-pattern--c90dbca1-780a-54c2-a24e-3f6d4472a134" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c515716d-5422-53d6-97d1-5fb5050a9636", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--c0eff40e-6b7a-5a48-88e1-2fec0d9d6ebc", "target_ref": "attack-pattern--473b0aa4-1cea-57d5-a0a1-9114ebeb1de6" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--02d03db8-ef71-5730-9e4a-659ddda8204f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--c0eff40e-6b7a-5a48-88e1-2fec0d9d6ebc", "target_ref": "attack-pattern--e9d0e479-5424-55c4-ab48-976a7a671010" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--913b476a-6504-5470-b433-1ca273850a21", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--55a04d90-f025-51fb-9f6e-9ebd9eeb482a", "target_ref": "attack-pattern--2a21b0c6-c06c-5130-9114-0d760dcb5b2c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a563a332-8f7e-5f15-bf8a-16553ac5173c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--55a04d90-f025-51fb-9f6e-9ebd9eeb482a", "target_ref": "attack-pattern--0de49898-b977-5cf7-9608-eff3285c50c7" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1a4df6df-bc78-5b39-bff6-9bb3820ad56b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--55a04d90-f025-51fb-9f6e-9ebd9eeb482a", "target_ref": "attack-pattern--1d0e4f47-8c77-58a2-b885-f44145ed3bf4" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1848ed08-d357-5277-98b4-1a92378ead99", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--55a04d90-f025-51fb-9f6e-9ebd9eeb482a", "target_ref": "attack-pattern--f5bce1e3-3637-56df-8db9-94e793306171" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--bf5fc513-5582-5e99-97ee-6360851ef7d0", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--55a04d90-f025-51fb-9f6e-9ebd9eeb482a", "target_ref": "attack-pattern--9b65ffc8-0be6-5809-b228-a85033f790ba" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--51f061f0-fbd3-55c7-bb3e-3da04cdb96c3", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--5ecc3958-6f4f-5ff9-b852-9a59b78c792a", "target_ref": "x-oak-tactic--54ff19cd-6a14-595b-be41-49018e597919" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3a64e3a7-9214-5aec-9bac-ab9f294e32e3", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--5ecc3958-6f4f-5ff9-b852-9a59b78c792a", "target_ref": "attack-pattern--44a15cd3-db68-5127-b8dd-cb96e537e3b7" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--afd12d32-39ac-5824-811c-0fe0f0cef60e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--5ecc3958-6f4f-5ff9-b852-9a59b78c792a", "target_ref": "attack-pattern--3be95af9-48b3-56a3-8e57-f07ac58e27f2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--203069ef-464f-538c-af3b-a66307eecd9c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--5ecc3958-6f4f-5ff9-b852-9a59b78c792a", "target_ref": "attack-pattern--71ecfc99-0efa-5c66-ad46-d0a4851cee1c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--19bcfbb5-7337-5512-94a4-ea8224b2461a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--4ada26d3-7a7c-5e02-a43a-043186e22802", "target_ref": "attack-pattern--96edd229-3959-5861-a34c-22ea8ac739d0" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9eb4ae6b-54cb-59b3-ae96-ccdbec258982", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--4ada26d3-7a7c-5e02-a43a-043186e22802", "target_ref": "attack-pattern--0658ea79-01b4-5c49-bb12-4c6e0876df4e" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0775df9e-b282-503c-adee-fc50d1527ece", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--4ada26d3-7a7c-5e02-a43a-043186e22802", "target_ref": "attack-pattern--7861ffbc-2d68-5482-ba5f-32e5a630a7a6" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c962a0fc-ce73-5029-9f7e-f8d6f85f6197", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--4ada26d3-7a7c-5e02-a43a-043186e22802", "target_ref": "attack-pattern--78f0aa7b-06b4-5266-b348-58db62932a71" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2ac8953a-899d-599c-bff9-8684feab22ea", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--eac433f0-af30-5b04-8b99-a751a33f55d7", "target_ref": "attack-pattern--e45221c4-74e9-52ab-8e20-96d05003d65a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5c514139-2d09-5ced-8c27-21bb71d6ef7d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--eac433f0-af30-5b04-8b99-a751a33f55d7", "target_ref": "attack-pattern--a55b5859-fa73-5cab-a342-82b97187ea20" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--55392fc5-f6c8-5d3d-85f5-75969168b502", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--eac433f0-af30-5b04-8b99-a751a33f55d7", "target_ref": "attack-pattern--921bd515-01df-5ee1-a643-7138f8d1ee7c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--245347e0-aa6b-5c03-bfb3-fe05672367d2", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--eac433f0-af30-5b04-8b99-a751a33f55d7", "target_ref": "attack-pattern--5deeb2fb-1df3-5566-8229-2e83bd241a08" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--af48a0ff-4797-51d7-88da-6dc85e9c6689", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--2cf79f32-89bc-572c-b4d6-d3018736387f", "target_ref": "attack-pattern--a7ebcbb2-dafe-5364-9932-e3d7bee02596" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--585ff1a4-52e0-57e5-9b98-fa79f5caed1c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--2cf79f32-89bc-572c-b4d6-d3018736387f", "target_ref": "attack-pattern--50650ed5-e07d-5fe8-9adf-7adb33f8182e" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--43743b6f-d93b-59cb-9f1f-89bcc64a42c5", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--5368e7c1-b6ca-5dfa-8eb7-2bb9e08d51d4", "target_ref": "attack-pattern--1a600b6f-3cbd-5141-822e-9577e857e9ec" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--582e1961-65d0-5e8b-9023-8ca24bebe88f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--5368e7c1-b6ca-5dfa-8eb7-2bb9e08d51d4", "target_ref": "attack-pattern--7861ffbc-2d68-5482-ba5f-32e5a630a7a6" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7c28ecf0-8544-5207-a6ae-248d7ef5492f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--5368e7c1-b6ca-5dfa-8eb7-2bb9e08d51d4", "target_ref": "attack-pattern--9b65ffc8-0be6-5809-b228-a85033f790ba" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b5c18fe1-5820-57df-9399-c44e1431f2b9", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--0bfd756b-68a3-5522-bab5-898bccd80249", "target_ref": "attack-pattern--3be95af9-48b3-56a3-8e57-f07ac58e27f2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--cee73a5e-d164-510f-806b-d06c592b1c32", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--0bfd756b-68a3-5522-bab5-898bccd80249", "target_ref": "attack-pattern--9b65ffc8-0be6-5809-b228-a85033f790ba" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--bcd2319b-9ee9-53d0-ac77-85a485f3a07f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--41a5517b-9810-57a4-8465-5b6835234332", "target_ref": "attack-pattern--79d99263-2431-5abd-bf5f-2869979031be" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6666cf85-e7a5-5cfb-b12c-6ebd8a3b9aa9", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--41a5517b-9810-57a4-8465-5b6835234332", "target_ref": "x-oak-tactic--5fc49855-8bca-5500-b810-322019badf15" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9d9242cc-7515-5728-91a2-0268fbe30ef0", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--5b9ab567-2ef6-5ace-a85d-e94977d85ee0", "target_ref": "attack-pattern--aebe2a72-a361-5ab4-8465-3a32a4dbd638" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--08ab96c5-08df-5719-9ca7-f2f629a9ab20", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--5b9ab567-2ef6-5ace-a85d-e94977d85ee0", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9c86a5c8-fab7-561b-83bb-f8666d9c5979", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--5b9ab567-2ef6-5ace-a85d-e94977d85ee0", "target_ref": "attack-pattern--e69d7f82-fe18-5677-abba-9dd6347bc5a2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--701d5f50-d2aa-5eed-8474-587600cf0e2c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--5b9ab567-2ef6-5ace-a85d-e94977d85ee0", "target_ref": "attack-pattern--093e472c-281c-5e78-9228-486255d3058a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d6c1e51b-5953-53a0-aff5-e65549bfe2ce", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--29c3b3d2-4c4d-5e84-8c98-4a342d51b467", "target_ref": "attack-pattern--e3ca28d4-2eb0-5329-96df-65f6a1363709" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1dcd7cb2-fa0c-58e1-8a98-9812465f7ba6", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--29c3b3d2-4c4d-5e84-8c98-4a342d51b467", "target_ref": "attack-pattern--051a950d-5407-5e53-9a5f-1c6ab61d0f6b" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--89106709-eeef-5a95-9dd4-5ea85394ea88", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--29c3b3d2-4c4d-5e84-8c98-4a342d51b467", "target_ref": "attack-pattern--e69d7f82-fe18-5677-abba-9dd6347bc5a2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9dd44e71-6542-567a-aed5-2c85889025f9", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--29c3b3d2-4c4d-5e84-8c98-4a342d51b467", "target_ref": "attack-pattern--9b65ffc8-0be6-5809-b228-a85033f790ba" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ef92fd62-deba-5e4f-9e7a-0089d3f3eebc", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--6224c74f-f287-5160-a0ac-a99ade677ec9", "target_ref": "attack-pattern--44a15cd3-db68-5127-b8dd-cb96e537e3b7" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7d688962-674b-5a95-9904-5c3bd16905d1", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--6224c74f-f287-5160-a0ac-a99ade677ec9", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--38d5d5cb-2d8a-5538-ac89-1fad75f1bbef", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--6224c74f-f287-5160-a0ac-a99ade677ec9", "target_ref": "attack-pattern--093e472c-281c-5e78-9228-486255d3058a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1b5541d6-2b8b-539b-80d1-56f0b5956150", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--6224c74f-f287-5160-a0ac-a99ade677ec9", "target_ref": "attack-pattern--9b65ffc8-0be6-5809-b228-a85033f790ba" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--566bd47b-76ea-537a-b994-56efd54f230f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--6c88a534-36dd-5d65-936b-f8c672587791", "target_ref": "attack-pattern--052caee2-c494-51c7-87d3-0b5ae531eeb2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--aa91ac8f-f80d-55d3-809d-9620f0ede304", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--6c88a534-36dd-5d65-936b-f8c672587791", "target_ref": "attack-pattern--5deeb2fb-1df3-5566-8229-2e83bd241a08" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9c3e6ad9-d42a-5abb-9f15-9cc946392d33", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--3464316b-c821-5a87-acbd-851ddcca8f2c", "target_ref": "attack-pattern--f05554c1-f308-5e98-8ef4-af1c993c4752" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--22b64fab-9e31-5313-a18f-f4d7fb6226c4", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--3464316b-c821-5a87-acbd-851ddcca8f2c", "target_ref": "x-oak-tactic--5fc49855-8bca-5500-b810-322019badf15" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--25f3f3df-de6c-5f34-8a66-0420b5f0b1a6", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--3464316b-c821-5a87-acbd-851ddcca8f2c", "target_ref": "attack-pattern--a508cca2-dfea-5831-9bd5-f7d69abe422b" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2ad4368c-a8c4-5830-af4d-d2bc1494c120", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--04196fc7-e671-5f59-98f9-418975e7c4f9", "target_ref": "attack-pattern--e45221c4-74e9-52ab-8e20-96d05003d65a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b7160ac3-0e61-580d-bf8f-95ae1762bcbf", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--04196fc7-e671-5f59-98f9-418975e7c4f9", "target_ref": "attack-pattern--a55b5859-fa73-5cab-a342-82b97187ea20" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ec89e5b1-4899-54bd-8f83-1a47d44593f4", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--04196fc7-e671-5f59-98f9-418975e7c4f9", "target_ref": "attack-pattern--051a950d-5407-5e53-9a5f-1c6ab61d0f6b" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6432a73b-3a61-577f-9a1d-5930f94597c3", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--04196fc7-e671-5f59-98f9-418975e7c4f9", "target_ref": "attack-pattern--5deeb2fb-1df3-5566-8229-2e83bd241a08" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c582cd9d-990b-5d29-af72-2a4f8bfb053d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--185586a3-f9db-5a0a-965d-23938dc95a27", "target_ref": "attack-pattern--921bd515-01df-5ee1-a643-7138f8d1ee7c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d717f7ee-6a9a-5477-b9be-5dc1ba2fda39", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--185586a3-f9db-5a0a-965d-23938dc95a27", "target_ref": "attack-pattern--051a950d-5407-5e53-9a5f-1c6ab61d0f6b" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--394dcbb0-8023-5de6-9058-c05d8090f4bf", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--11dc673c-a030-5bea-969a-81c662707a13", "target_ref": "x-oak-tactic--54ff19cd-6a14-595b-be41-49018e597919" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2dab81a8-c787-5b6a-ae91-8996c7ea44a5", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--11dc673c-a030-5bea-969a-81c662707a13", "target_ref": "attack-pattern--44a15cd3-db68-5127-b8dd-cb96e537e3b7" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--54f5364b-faf0-51e2-bae6-96da811097dd", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--11dc673c-a030-5bea-969a-81c662707a13", "target_ref": "attack-pattern--37433c31-ae6a-50f0-bfe3-22ac2f1747d9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0adab143-cb29-58f1-8314-efadf9cd42ec", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--11dc673c-a030-5bea-969a-81c662707a13", "target_ref": "attack-pattern--9b65ffc8-0be6-5809-b228-a85033f790ba" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--206e4eed-ec95-5029-b680-9d81dd04a0a7", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--47f69d28-12fe-573a-9b4f-a02edd02140c", "target_ref": "attack-pattern--414a6469-36be-5ecd-9603-290930d42b86" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9726d804-4b6f-579d-921e-bf62d0293006", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--47f69d28-12fe-573a-9b4f-a02edd02140c", "target_ref": "attack-pattern--f0e70cea-8e64-51c4-9f64-09ea2bf642aa" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--25e03781-b5f5-5e59-bfaa-8eaa04f484b3", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--47f69d28-12fe-573a-9b4f-a02edd02140c", "target_ref": "attack-pattern--78f0aa7b-06b4-5266-b348-58db62932a71" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--79f79439-2f93-537c-8718-e610b0a56e89", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--de200971-924d-52e7-afbc-b8321305cb29", "target_ref": "attack-pattern--2a21b0c6-c06c-5130-9114-0d760dcb5b2c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--eb8e4848-81e4-57d3-8dcc-bf3e20871039", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--de200971-924d-52e7-afbc-b8321305cb29", "target_ref": "attack-pattern--0de49898-b977-5cf7-9608-eff3285c50c7" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--febbee31-59cc-52c3-b85e-dc23aad64abe", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--de200971-924d-52e7-afbc-b8321305cb29", "target_ref": "attack-pattern--9b65ffc8-0be6-5809-b228-a85033f790ba" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a3d8e7c2-9a51-5404-9923-db59c7a2f38c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--ee5db7c8-0258-52cc-a6f3-1e2dfaa1590d", "target_ref": "attack-pattern--a7929123-b1d5-5eee-b042-dc7812bdd713" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f5667272-5790-560d-9a39-b2e392d888cc", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--ee5db7c8-0258-52cc-a6f3-1e2dfaa1590d", "target_ref": "attack-pattern--b027592f-baee-5d2a-9d15-925aa1b77941" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e24877a7-3e24-5c31-be60-c892c4e092d0", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--ee5db7c8-0258-52cc-a6f3-1e2dfaa1590d", "target_ref": "attack-pattern--b8d62a9c-14cd-503a-af8d-a26b825dffcd" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7e0abae5-eee7-5155-833c-9e4177679cba", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--ee5db7c8-0258-52cc-a6f3-1e2dfaa1590d", "target_ref": "attack-pattern--921bd515-01df-5ee1-a643-7138f8d1ee7c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--37091ca1-5d1d-52fe-a2a8-a0eba8ef4a2f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--9aa03626-6f7b-5e91-93ba-98a14cb079d7", "target_ref": "attack-pattern--0de49898-b977-5cf7-9608-eff3285c50c7" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b30d9623-2ac8-549f-ad8a-ae377469a470", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--9aa03626-6f7b-5e91-93ba-98a14cb079d7", "target_ref": "attack-pattern--71ecfc99-0efa-5c66-ad46-d0a4851cee1c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e0f30be6-e2f2-573d-9664-e5be9a4f26c8", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--9aa03626-6f7b-5e91-93ba-98a14cb079d7", "target_ref": "attack-pattern--9b65ffc8-0be6-5809-b228-a85033f790ba" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b78f7d01-b016-515f-b22e-d995f56baa1f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--2f732f5a-3ec1-5a5f-8fad-e621241f3e15", "target_ref": "attack-pattern--44a15cd3-db68-5127-b8dd-cb96e537e3b7" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--db9701e1-a8eb-5727-8f63-d205188ae3ec", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--2f732f5a-3ec1-5a5f-8fad-e621241f3e15", "target_ref": "attack-pattern--0a436476-4fd9-5f9a-9735-7d7a9bf791ae" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c9955b40-dc50-5273-941b-ee1edfe13f00", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--2f732f5a-3ec1-5a5f-8fad-e621241f3e15", "target_ref": "attack-pattern--801ea2cb-7842-52ae-9311-023b6cd74e62" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9ccb1709-4302-5a6b-9437-8d5685f39422", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--2f732f5a-3ec1-5a5f-8fad-e621241f3e15", "target_ref": "attack-pattern--1a600b6f-3cbd-5141-822e-9577e857e9ec" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--70941f82-50e2-52ea-8c7a-a0afeeabfabc", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--2f732f5a-3ec1-5a5f-8fad-e621241f3e15", "target_ref": "attack-pattern--9b65ffc8-0be6-5809-b228-a85033f790ba" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--80aee892-4aab-5b8d-b726-7830e5f33d70", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--feabd215-b22b-590a-be74-99aabc235c5c", "target_ref": "attack-pattern--2a21b0c6-c06c-5130-9114-0d760dcb5b2c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f8ac1c1c-ad12-59c1-b211-ff8ce0c15b2c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--feabd215-b22b-590a-be74-99aabc235c5c", "target_ref": "attack-pattern--0de49898-b977-5cf7-9608-eff3285c50c7" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--96ac4b30-dd2f-5fc3-9fc4-cffdfda55ab1", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--feabd215-b22b-590a-be74-99aabc235c5c", "target_ref": "attack-pattern--4dd355bc-2389-55c4-911c-1bac3744dbbc" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--88905fd6-4998-572b-8d52-b4471c4fb7b0", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--f7353939-84d2-5ebc-8917-897507df819d", "target_ref": "attack-pattern--cf39fa63-9044-5279-8ea5-4acb64d53904" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--26f02b9c-5a5b-5562-a2e9-4aa8f7a9311a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--f7353939-84d2-5ebc-8917-897507df819d", "target_ref": "attack-pattern--e3ca28d4-2eb0-5329-96df-65f6a1363709" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9ecef011-7620-5f91-9a94-e324211fa98c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--84099786-6523-5475-8a94-90d761197050", "target_ref": "attack-pattern--9b65ffc8-0be6-5809-b228-a85033f790ba" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f2305736-b61c-5735-aa23-03156493cdec", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--1e2245b5-d004-5853-b73c-13cc7168a217", "target_ref": "x-oak-tactic--54ff19cd-6a14-595b-be41-49018e597919" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--817d4450-8bb5-5682-8c86-5f57de1731f2", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--1e2245b5-d004-5853-b73c-13cc7168a217", "target_ref": "attack-pattern--44a15cd3-db68-5127-b8dd-cb96e537e3b7" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b2afdcb1-acef-5fe6-ada6-6900abb6cbcd", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--1e2245b5-d004-5853-b73c-13cc7168a217", "target_ref": "attack-pattern--9b65ffc8-0be6-5809-b228-a85033f790ba" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9ca3c82e-8fe7-5f5d-bc10-ccbc36da5e21", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--16367484-f36b-5c57-bb18-ca348864f7eb", "target_ref": "attack-pattern--44a15cd3-db68-5127-b8dd-cb96e537e3b7" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a63d094f-aba4-5e7c-a5a8-2ae4c52508b4", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--16367484-f36b-5c57-bb18-ca348864f7eb", "target_ref": "attack-pattern--e3ca28d4-2eb0-5329-96df-65f6a1363709" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--75a47a24-3a7d-5c42-857b-24c98c32dbf9", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--6c14be40-1179-5a20-9565-5aafdb097c6e", "target_ref": "attack-pattern--e1cb4489-0672-54ec-83b8-188a224bac95" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--21799fd0-17ac-55dc-91ac-62264396c979", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--9f74e5d8-ae18-5e08-9ebe-23bf9a3bd57e", "target_ref": "attack-pattern--78f0aa7b-06b4-5266-b348-58db62932a71" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3556d110-259f-5286-a274-ca8894e555d0", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--9f74e5d8-ae18-5e08-9ebe-23bf9a3bd57e", "target_ref": "attack-pattern--12a37f6f-1b04-52d2-9ad3-56bca9ba3350" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--839f0949-52e9-553b-b655-6859754acbc9", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--9f74e5d8-ae18-5e08-9ebe-23bf9a3bd57e", "target_ref": "attack-pattern--af731cf1-9b12-550c-b56b-8ad41735e526" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f6647c8b-dc4a-53a2-b607-62ad13ae6520", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--811238c1-106c-52c5-bf1e-80c753043075", "target_ref": "attack-pattern--569abf6d-a9fe-53f5-99c8-087ed904d622" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--db3824fc-f7e3-5143-aa3b-1a73ec36e3b8", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--811238c1-106c-52c5-bf1e-80c753043075", "target_ref": "attack-pattern--5deeb2fb-1df3-5566-8229-2e83bd241a08" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4e6198ea-eb17-5959-87a9-85d8aa85f93a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--811238c1-106c-52c5-bf1e-80c753043075", "target_ref": "attack-pattern--9b65ffc8-0be6-5809-b228-a85033f790ba" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3c8d7c8d-ce25-5465-b066-1c57dcf13287", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--811238c1-106c-52c5-bf1e-80c753043075", "target_ref": "attack-pattern--8fea3d14-6b55-534c-986e-1c6f3d1638f2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--fab06757-f2ac-5dcd-94e0-9840bca6ebf7", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--68a9f223-bfaa-5f44-b875-7d179fd7a7f6", "target_ref": "x-oak-tactic--a05710d6-773d-5671-81e6-1a9d53ce156a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4a184b17-c9ab-53e8-a174-bdbd2ce75160", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--68a9f223-bfaa-5f44-b875-7d179fd7a7f6", "target_ref": "attack-pattern--0de49898-b977-5cf7-9608-eff3285c50c7" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f6b0e5b2-8d64-591d-a910-e98f2ed6c660", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--68a9f223-bfaa-5f44-b875-7d179fd7a7f6", "target_ref": "attack-pattern--9b65ffc8-0be6-5809-b228-a85033f790ba" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e91efff4-3d94-539e-8ba6-0352561510fb", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--c39211f1-85be-59d7-ac2d-ff69371a43c5", "target_ref": "attack-pattern--d56864b8-d792-56b8-8190-be436238825d" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--48a0b75a-6dd7-52d6-aa13-503fbb0dd076", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--c39211f1-85be-59d7-ac2d-ff69371a43c5", "target_ref": "attack-pattern--77b517cc-4b13-5a1b-8262-fb171254ddb5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--32c895cd-8b04-56c6-a78d-64aa3537c8a8", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--c39211f1-85be-59d7-ac2d-ff69371a43c5", "target_ref": "attack-pattern--5deeb2fb-1df3-5566-8229-2e83bd241a08" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5a5be3b0-7656-502c-b17b-4c7a9c503353", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--c39211f1-85be-59d7-ac2d-ff69371a43c5", "target_ref": "attack-pattern--3be95af9-48b3-56a3-8e57-f07ac58e27f2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--fe14d0e2-97d2-5c4e-a7d2-8c957109fc2e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--c39211f1-85be-59d7-ac2d-ff69371a43c5", "target_ref": "attack-pattern--9b65ffc8-0be6-5809-b228-a85033f790ba" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b75d6f61-c57a-54de-9f63-2a66b788c49c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--f5d03a49-3764-5b06-a93b-cade0e577aae", "target_ref": "attack-pattern--12a37f6f-1b04-52d2-9ad3-56bca9ba3350" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--55a8f18e-98f1-5e34-a7db-d58b31deb99c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--f5d03a49-3764-5b06-a93b-cade0e577aae", "target_ref": "attack-pattern--71ecfc99-0efa-5c66-ad46-d0a4851cee1c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--16fd5aa8-8e30-562d-a42e-d4443b5fac73", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--f5d03a49-3764-5b06-a93b-cade0e577aae", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f9830827-77a4-59ba-8c73-5a81f4520fe5", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--3af92b6a-fc9a-515d-8439-bebd482c364b", "target_ref": "x-oak-tactic--d3f737a3-09cc-571c-88eb-d5e9e251167d" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--499b653b-f9dc-56c2-8dae-70fe62a0c529", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--3af92b6a-fc9a-515d-8439-bebd482c364b", "target_ref": "attack-pattern--fd40fed2-9093-5b5a-8ebd-5b288e3ae6c5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3b9b4a80-62b9-5317-bc42-0b2199efb1f4", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--944f9a9e-504c-526a-96c1-0aa50ef4f25b", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e16dd7a2-c70d-57f8-a3e5-1330aca8ba02", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--944f9a9e-504c-526a-96c1-0aa50ef4f25b", "target_ref": "attack-pattern--093e472c-281c-5e78-9228-486255d3058a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f8084a74-00cd-5b07-b6fa-bf32798a4faa", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--944f9a9e-504c-526a-96c1-0aa50ef4f25b", "target_ref": "attack-pattern--9b65ffc8-0be6-5809-b228-a85033f790ba" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3c147a05-a06d-5440-b1c6-83ec0710d5c1", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--86268bbc-efb7-5a80-b571-0866c168b169", "target_ref": "attack-pattern--44a15cd3-db68-5127-b8dd-cb96e537e3b7" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--fb04e12d-c010-59de-b868-bb49467830c5", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--bdabd8cc-8cba-5251-9d4b-2fd59d6f6353", "target_ref": "attack-pattern--77b517cc-4b13-5a1b-8262-fb171254ddb5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--deb5a284-cc9e-51e5-aa2e-23020e677751", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--bdabd8cc-8cba-5251-9d4b-2fd59d6f6353", "target_ref": "attack-pattern--5deeb2fb-1df3-5566-8229-2e83bd241a08" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5921da97-77f8-50d0-beaf-5d290df4052e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--d0828f39-53fb-5f90-8e08-23131dc787b5", "target_ref": "attack-pattern--f0e70cea-8e64-51c4-9f64-09ea2bf642aa" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--23002b3e-7236-59b9-b1d6-4adef773f2c5", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--d0828f39-53fb-5f90-8e08-23131dc787b5", "target_ref": "attack-pattern--7ec6ff5b-83cd-5725-adda-2b5d3a846414" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--14b03e28-bb91-56e3-b71c-6048a6631b38", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--d0828f39-53fb-5f90-8e08-23131dc787b5", "target_ref": "attack-pattern--093e472c-281c-5e78-9228-486255d3058a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--563a60d7-ac1a-57b0-8529-1a7ed2b98734", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--861f4092-2408-507c-bcd4-51f4c249ee0a", "target_ref": "attack-pattern--e1cb4489-0672-54ec-83b8-188a224bac95" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--44987274-d4aa-51d2-ac4f-8ce23003773c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--61eb23a3-4aa6-5820-9258-65de9a30bea4", "target_ref": "attack-pattern--052caee2-c494-51c7-87d3-0b5ae531eeb2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--fe5b1584-8477-5370-8899-c76ad147ecc1", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--61eb23a3-4aa6-5820-9258-65de9a30bea4", "target_ref": "attack-pattern--aebe2a72-a361-5ab4-8465-3a32a4dbd638" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e4b2aff4-1264-5db4-9941-50d7c7283af0", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--61eb23a3-4aa6-5820-9258-65de9a30bea4", "target_ref": "attack-pattern--bf1f9ad7-4abc-5204-8d5c-d597d194c7e0" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3e0cebb7-a7f0-575b-aecd-ff1feb106d80", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--61eb23a3-4aa6-5820-9258-65de9a30bea4", "target_ref": "attack-pattern--f65581dd-3a77-50d8-b85f-c0df5e90b22f" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0dfc44d0-6ed7-5eb2-a0a1-cba7ef3ed421", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--61eb23a3-4aa6-5820-9258-65de9a30bea4", "target_ref": "attack-pattern--a019d6df-047d-5759-8cee-e8de54595ade" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--50c4b9c9-e30f-51b7-b466-4b4e0bc69429", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--24498991-b5a5-5ac7-b595-b0f8646a857b", "target_ref": "attack-pattern--44a15cd3-db68-5127-b8dd-cb96e537e3b7" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e8d19b59-bc7f-5286-8b5a-c0164f608b74", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--24498991-b5a5-5ac7-b595-b0f8646a857b", "target_ref": "attack-pattern--e3ca28d4-2eb0-5329-96df-65f6a1363709" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c19fad10-a770-50e6-8316-de384a093818", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--24498991-b5a5-5ac7-b595-b0f8646a857b", "target_ref": "attack-pattern--e69d7f82-fe18-5677-abba-9dd6347bc5a2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7b255b6f-14bc-5ba4-949d-21345f5d6b55", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--24498991-b5a5-5ac7-b595-b0f8646a857b", "target_ref": "attack-pattern--093e472c-281c-5e78-9228-486255d3058a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2e7f1ed3-f82c-551c-b55a-f5699f24a534", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--074e61da-7a38-5e76-b2ef-2c50118f4224", "target_ref": "attack-pattern--eaa6f530-4f94-5ca6-b2d9-cbb9f56636a0" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0f8aea2c-557d-504e-8542-f78098b55abc", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--074e61da-7a38-5e76-b2ef-2c50118f4224", "target_ref": "attack-pattern--453ebde2-a358-531b-99b5-c9b532a849b8" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--53995c3f-e5fd-59bb-9cf1-fe45de6a41d1", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--bf62e56b-1c77-538c-98e7-4b0168dfee5d", "target_ref": "attack-pattern--44a15cd3-db68-5127-b8dd-cb96e537e3b7" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4c10e883-df11-5f41-9c5b-2f26b3cd7314", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--13c8d376-4d35-5ff3-aa59-8eb650be2414", "target_ref": "attack-pattern--44a15cd3-db68-5127-b8dd-cb96e537e3b7" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5799d525-9fb6-5d46-a59f-fc7b8c1088de", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--13c8d376-4d35-5ff3-aa59-8eb650be2414", "target_ref": "attack-pattern--78f0aa7b-06b4-5266-b348-58db62932a71" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e2195362-e91a-59e6-ad5b-4f8c41381b55", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--e123ebc8-6d8a-588c-a72c-4d35a365f709", "target_ref": "attack-pattern--1a600b6f-3cbd-5141-822e-9577e857e9ec" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3d87ba99-c4e2-5c6a-b1fd-c7ccb8b5c21e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--e123ebc8-6d8a-588c-a72c-4d35a365f709", "target_ref": "attack-pattern--5deeb2fb-1df3-5566-8229-2e83bd241a08" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7dd53e20-0b8c-5401-8f41-973b8b8c8ef3", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--e123ebc8-6d8a-588c-a72c-4d35a365f709", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--30488ac8-dd27-550c-9ebf-c0934206419c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--e123ebc8-6d8a-588c-a72c-4d35a365f709", "target_ref": "attack-pattern--9b65ffc8-0be6-5809-b228-a85033f790ba" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--84bd15fe-9957-52de-bf82-2a7694ee3d90", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--749b5277-7265-53a2-b07a-4e634970adaf", "target_ref": "attack-pattern--03407478-76ff-57d8-bf96-1cb5b5108d9d" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3b0f4234-7853-52e4-a02c-854581701303", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--749b5277-7265-53a2-b07a-4e634970adaf", "target_ref": "attack-pattern--5deeb2fb-1df3-5566-8229-2e83bd241a08" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--691dc7f4-b372-5006-ba2e-72f30efd3204", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--749b5277-7265-53a2-b07a-4e634970adaf", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5490de5b-3508-57ac-8e26-e0d612872c90", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--749b5277-7265-53a2-b07a-4e634970adaf", "target_ref": "attack-pattern--b6a77deb-14ae-59e3-b4b2-b73065972b6c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ed73df9c-c523-5f11-ad6d-44c94628d989", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--749b5277-7265-53a2-b07a-4e634970adaf", "target_ref": "attack-pattern--9b65ffc8-0be6-5809-b228-a85033f790ba" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a37faa04-b2ef-5927-849b-d7e047adf4fe", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--fa50c655-5a24-5a32-8e51-07afc880085e", "target_ref": "x-oak-tactic--d3f737a3-09cc-571c-88eb-d5e9e251167d" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0e9f0d72-d5bf-5f13-817b-38edd0cdda5a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--fa50c655-5a24-5a32-8e51-07afc880085e", "target_ref": "attack-pattern--9b65ffc8-0be6-5809-b228-a85033f790ba" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a175595f-9978-5071-aacb-c19c75fddcb0", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--fa50c655-5a24-5a32-8e51-07afc880085e", "target_ref": "attack-pattern--5d6fd913-d256-5849-b154-bff6af32ce81" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--aefc849a-c634-59a3-9423-cc33db4d8773", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--9ea867ff-ebe3-5460-8b3a-f05e7ab16872", "target_ref": "attack-pattern--5deeb2fb-1df3-5566-8229-2e83bd241a08" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--744ca8c7-51f4-5eab-8df0-a0dabaa42d38", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--9ea867ff-ebe3-5460-8b3a-f05e7ab16872", "target_ref": "attack-pattern--f5bce1e3-3637-56df-8db9-94e793306171" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--87f9c3cd-de1a-55cc-893c-c55b3c39a81f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--bc9d864d-6bb8-5857-be12-3e50ee6654e0", "target_ref": "x-oak-tactic--54ff19cd-6a14-595b-be41-49018e597919" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--42e1c763-1959-566c-8e03-8cfffcd6340d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--bc9d864d-6bb8-5857-be12-3e50ee6654e0", "target_ref": "attack-pattern--44a15cd3-db68-5127-b8dd-cb96e537e3b7" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a1a28812-044b-5774-b3d4-957a1c896a3f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--bc9d864d-6bb8-5857-be12-3e50ee6654e0", "target_ref": "attack-pattern--96edd229-3959-5861-a34c-22ea8ac739d0" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5ca490c8-7b58-57ba-a9df-529da857a5c2", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--a94196b7-6748-5cf3-83d5-f64a9e8cea92", "target_ref": "attack-pattern--cf39fa63-9044-5279-8ea5-4acb64d53904" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--70205664-61bf-5459-a7d1-ff8ce16930ae", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--a94196b7-6748-5cf3-83d5-f64a9e8cea92", "target_ref": "attack-pattern--8a373cd0-d1fc-5d17-916d-993d5cd3e7c1" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d248d990-0ec2-572b-b041-a579906af132", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--a94196b7-6748-5cf3-83d5-f64a9e8cea92", "target_ref": "attack-pattern--093e472c-281c-5e78-9228-486255d3058a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4cdb4bdc-72dc-5c17-988e-89884df84a4e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--cef619f3-ef7a-5aed-b170-8521920df0e8", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--18f520fd-79ae-5a5f-a48c-cf3eafcb77e8", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--cef619f3-ef7a-5aed-b170-8521920df0e8", "target_ref": "attack-pattern--093e472c-281c-5e78-9228-486255d3058a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--59ed72fd-7f1d-539b-9367-500bb5d3627e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--cef619f3-ef7a-5aed-b170-8521920df0e8", "target_ref": "attack-pattern--f5bce1e3-3637-56df-8db9-94e793306171" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b9a8b8a4-d455-5b63-9491-680798f1f002", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--cef619f3-ef7a-5aed-b170-8521920df0e8", "target_ref": "attack-pattern--f81933a4-bfe2-528f-94ef-399577e5a682" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8980d2fe-0378-5f61-bf30-bb1bd6f20f33", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--73568bd7-11d5-5515-928a-cd4a51da868d", "target_ref": "attack-pattern--1a600b6f-3cbd-5141-822e-9577e857e9ec" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1a2ca3a2-936c-5268-853e-22603269ef5e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--73568bd7-11d5-5515-928a-cd4a51da868d", "target_ref": "attack-pattern--3be95af9-48b3-56a3-8e57-f07ac58e27f2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ec2ef22a-3d51-5354-88c9-dd79ef80b336", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--73568bd7-11d5-5515-928a-cd4a51da868d", "target_ref": "attack-pattern--093e472c-281c-5e78-9228-486255d3058a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--084b6f48-e21d-5c2e-949e-6dceb507f840", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--73568bd7-11d5-5515-928a-cd4a51da868d", "target_ref": "attack-pattern--c6390ae8-9835-52c2-8fd7-fac5b37acc18" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--76184088-7474-59c8-b269-7ffa0556bab0", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--24b20635-5277-5283-a704-16e67e18ca08", "target_ref": "attack-pattern--03407478-76ff-57d8-bf96-1cb5b5108d9d" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--127068a9-797e-5230-9bed-27328122ffd1", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--24b20635-5277-5283-a704-16e67e18ca08", "target_ref": "attack-pattern--f5bce1e3-3637-56df-8db9-94e793306171" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--68490b18-97b4-5fd5-9387-ffb887c27759", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--24b20635-5277-5283-a704-16e67e18ca08", "target_ref": "attack-pattern--b6a77deb-14ae-59e3-b4b2-b73065972b6c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--58484052-fb2c-59f3-bce5-101f5d475d5a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--ca61571c-a42b-5a51-916b-bff338210680", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--aa0b6a68-5daf-5750-af9f-d38aa9dc0390", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--ca61571c-a42b-5a51-916b-bff338210680", "target_ref": "attack-pattern--093e472c-281c-5e78-9228-486255d3058a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0ffefff6-1389-5739-9cd8-9cc4c02d87cf", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--ca61571c-a42b-5a51-916b-bff338210680", "target_ref": "attack-pattern--f5bce1e3-3637-56df-8db9-94e793306171" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--67250848-b3b3-5279-bb3f-802e500d9ff1", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--ca61571c-a42b-5a51-916b-bff338210680", "target_ref": "attack-pattern--aad54a89-4a6f-5019-a80b-997786799f80" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ada1c973-fe41-50b7-bae4-47334157334f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--d3fc618a-9947-5a94-9c7b-37d3edb71d63", "target_ref": "attack-pattern--093e472c-281c-5e78-9228-486255d3058a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4be372fe-69f5-5366-a956-b05d524ba650", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--d3fc618a-9947-5a94-9c7b-37d3edb71d63", "target_ref": "attack-pattern--9b65ffc8-0be6-5809-b228-a85033f790ba" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--586f66f3-e548-5bc7-86b3-6671d228a3a5", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--2975b8b1-f633-53ae-8d8c-6960127e8f75", "target_ref": "attack-pattern--9552d7a9-3083-569f-a641-d880fc8a27d5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--366af38b-15a2-56d1-939e-c8d82c347f7c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--2975b8b1-f633-53ae-8d8c-6960127e8f75", "target_ref": "attack-pattern--052caee2-c494-51c7-87d3-0b5ae531eeb2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d22ad444-6396-52f8-992a-a1e5a0375680", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--2975b8b1-f633-53ae-8d8c-6960127e8f75", "target_ref": "attack-pattern--040f06e8-1825-51bd-8145-52c5b97b26d5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8a7be579-2d13-50d5-95d7-4a9c1ccf98f9", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--2975b8b1-f633-53ae-8d8c-6960127e8f75", "target_ref": "attack-pattern--5deeb2fb-1df3-5566-8229-2e83bd241a08" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--033b8567-37d2-5b91-a13e-6171c2a1ac41", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--7b1b8923-6e20-5881-8ed2-33f79c39b464", "target_ref": "attack-pattern--f81933a4-bfe2-528f-94ef-399577e5a682" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0782aeac-2a6c-57de-9408-614639fd16d6", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--7b1b8923-6e20-5881-8ed2-33f79c39b464", "target_ref": "attack-pattern--9b65ffc8-0be6-5809-b228-a85033f790ba" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3eeb08b4-cb0d-5544-941f-c9307246bd35", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--26dcf309-c669-5bbb-81cf-4504c39632cb", "target_ref": "attack-pattern--28abf537-2707-58ba-99aa-5a6cef69eb87" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--32d378cb-fc9e-5fa0-883c-8747b972568d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--26dcf309-c669-5bbb-81cf-4504c39632cb", "target_ref": "attack-pattern--a508cca2-dfea-5831-9bd5-f7d69abe422b" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--023bfaff-bc94-5aea-984e-d4dec7da7fb9", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--dffa6da5-9fbe-5eaf-af64-570e4838c151", "target_ref": "attack-pattern--414a6469-36be-5ecd-9603-290930d42b86" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9a9e95c9-0df2-5baf-8fcf-45f6740a83bc", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--dffa6da5-9fbe-5eaf-af64-570e4838c151", "target_ref": "attack-pattern--f0e70cea-8e64-51c4-9f64-09ea2bf642aa" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e68c9d97-00a2-5047-91b1-96f9d7047d4b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--e66ecde5-48a0-5c18-8013-48cd72654414", "target_ref": "attack-pattern--d56864b8-d792-56b8-8190-be436238825d" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e6af2a66-81e0-56a2-96be-1e37559308eb", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--e66ecde5-48a0-5c18-8013-48cd72654414", "target_ref": "attack-pattern--093e472c-281c-5e78-9228-486255d3058a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b84831b6-ebe1-515c-b3ae-7b449b11aa25", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--1109cbd0-8880-58b6-b99f-3f6c4def44e6", "target_ref": "attack-pattern--f5bce1e3-3637-56df-8db9-94e793306171" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a6db3fb8-1f2a-5cee-ac64-33ca77b05fdd", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--1109cbd0-8880-58b6-b99f-3f6c4def44e6", "target_ref": "attack-pattern--50650ed5-e07d-5fe8-9adf-7adb33f8182e" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1dc4ad8e-7dca-5922-b415-80b5c1dc8a5c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--67184120-5c8c-5d57-b89b-fe1f2e9f2d21", "target_ref": "attack-pattern--f5bce1e3-3637-56df-8db9-94e793306171" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3883ab1e-70f7-5a80-86c0-3928a4e7277c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--d075b9d4-10b8-597d-8736-38d93bf43984", "target_ref": "attack-pattern--e69d7f82-fe18-5677-abba-9dd6347bc5a2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a9a1fc9e-4ccb-537d-8f6b-aaf4ef312d50", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--d075b9d4-10b8-597d-8736-38d93bf43984", "target_ref": "attack-pattern--f5bce1e3-3637-56df-8db9-94e793306171" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5eb56eb6-713e-5cf4-9361-b0148779eb31", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--d075b9d4-10b8-597d-8736-38d93bf43984", "target_ref": "attack-pattern--9b65ffc8-0be6-5809-b228-a85033f790ba" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4dd125ae-c58e-530f-924b-ab31975b16fe", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--7a30a51e-12fa-5fa6-941d-5778ab061fe5", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b90c92b6-cd3b-59a5-81c1-06b4681cbeeb", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--7a30a51e-12fa-5fa6-941d-5778ab061fe5", "target_ref": "attack-pattern--f5bce1e3-3637-56df-8db9-94e793306171" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d8cfa352-c79f-57e8-bbf0-8dfc002452fa", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--7a30a51e-12fa-5fa6-941d-5778ab061fe5", "target_ref": "attack-pattern--f81933a4-bfe2-528f-94ef-399577e5a682" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d1706cfd-21a4-5657-9a91-bf6bcf077df7", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--e68a9777-418d-50fa-bdd8-cb971558a51c", "target_ref": "attack-pattern--78f0aa7b-06b4-5266-b348-58db62932a71" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--19308c27-8e7c-5c29-a1fa-fbae1a78bab9", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--e68a9777-418d-50fa-bdd8-cb971558a51c", "target_ref": "attack-pattern--5deeb2fb-1df3-5566-8229-2e83bd241a08" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d91b3cca-6a3d-5bae-a1f6-beced7c1e9b7", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--e68a9777-418d-50fa-bdd8-cb971558a51c", "target_ref": "attack-pattern--e69d7f82-fe18-5677-abba-9dd6347bc5a2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3e50676a-1096-5428-8dd1-a686b987eb80", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--b949e15a-d5dc-5474-9929-7c6763a1eab6", "target_ref": "x-oak-tactic--54ff19cd-6a14-595b-be41-49018e597919" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2994ad65-b23a-5bc2-b89c-20fba6b9e98d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--b949e15a-d5dc-5474-9929-7c6763a1eab6", "target_ref": "attack-pattern--44a15cd3-db68-5127-b8dd-cb96e537e3b7" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b0b94582-62e8-5fd3-8db3-ece7f7a6d4c7", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--b949e15a-d5dc-5474-9929-7c6763a1eab6", "target_ref": "attack-pattern--9b65ffc8-0be6-5809-b228-a85033f790ba" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f75a2402-8d73-5548-9336-fdb48d6d494c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--7a251a45-3fc8-54a2-baba-68049a1606d1", "target_ref": "x-oak-tactic--54ff19cd-6a14-595b-be41-49018e597919" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4fd980fa-6d31-5568-9015-01ce62ea950b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--7a251a45-3fc8-54a2-baba-68049a1606d1", "target_ref": "attack-pattern--44a15cd3-db68-5127-b8dd-cb96e537e3b7" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--590b5e71-a835-5737-ad58-df013acd32c7", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--7a251a45-3fc8-54a2-baba-68049a1606d1", "target_ref": "attack-pattern--37433c31-ae6a-50f0-bfe3-22ac2f1747d9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--529598fb-5baf-57b0-8c06-79de349494e5", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--691c5637-b82e-56ff-8aec-db95d32700ab", "target_ref": "attack-pattern--1a600b6f-3cbd-5141-822e-9577e857e9ec" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7739ab82-cf49-5b76-be53-52cccf19e893", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--691c5637-b82e-56ff-8aec-db95d32700ab", "target_ref": "attack-pattern--e66a56f1-221e-5079-bfe4-99ccbe842a5a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--17ae401f-7beb-5950-ba55-5e125c36c56d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--691c5637-b82e-56ff-8aec-db95d32700ab", "target_ref": "attack-pattern--e69d7f82-fe18-5677-abba-9dd6347bc5a2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d8363854-0057-5d73-90b2-66297e071a7f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--691c5637-b82e-56ff-8aec-db95d32700ab", "target_ref": "attack-pattern--093e472c-281c-5e78-9228-486255d3058a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--de78a9b8-22ac-5920-9b9c-383cf1b63b94", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--efbd291f-64af-5651-8453-c87145cff95c", "target_ref": "attack-pattern--44a15cd3-db68-5127-b8dd-cb96e537e3b7" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--bbc0bd36-fb25-51de-8164-d7dcbaf957f3", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--efbd291f-64af-5651-8453-c87145cff95c", "target_ref": "attack-pattern--f81933a4-bfe2-528f-94ef-399577e5a682" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6723ec96-2bd3-542b-8f80-9fd665ee9fa6", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--2e861b74-aeee-58b6-8585-1ba770b07db1", "target_ref": "attack-pattern--9b65ffc8-0be6-5809-b228-a85033f790ba" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ef407158-a623-57f6-8852-e1a1feb70145", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--2e861b74-aeee-58b6-8585-1ba770b07db1", "target_ref": "attack-pattern--8fea3d14-6b55-534c-986e-1c6f3d1638f2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5d3c9bc6-e57e-5ba7-a133-0412bca4719e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--4ec15cc9-ec58-517b-863f-fc59bba119b7", "target_ref": "attack-pattern--d56864b8-d792-56b8-8190-be436238825d" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a2b9a8a2-7c22-52cc-95b3-78d71a4c9aee", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--4ec15cc9-ec58-517b-863f-fc59bba119b7", "target_ref": "attack-pattern--5deeb2fb-1df3-5566-8229-2e83bd241a08" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--022bc426-d91f-5741-802a-02307afb72c4", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--4ec15cc9-ec58-517b-863f-fc59bba119b7", "target_ref": "attack-pattern--e69d7f82-fe18-5677-abba-9dd6347bc5a2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1b2939e7-3069-5a25-93ce-e113921f7c60", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--4ec15cc9-ec58-517b-863f-fc59bba119b7", "target_ref": "attack-pattern--a7ebcbb2-dafe-5364-9932-e3d7bee02596" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--367dbf7b-f31c-54a3-8e90-4e3799750b0e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--520967bb-f6d4-590b-a7fc-a59279613bdd", "target_ref": "attack-pattern--cf39fa63-9044-5279-8ea5-4acb64d53904" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4378e12c-0519-59dc-bbd1-5cbfc9b9646a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--520967bb-f6d4-590b-a7fc-a59279613bdd", "target_ref": "attack-pattern--44a15cd3-db68-5127-b8dd-cb96e537e3b7" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--75681cbc-2f42-5c7d-b03a-0c87090ad083", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--520967bb-f6d4-590b-a7fc-a59279613bdd", "target_ref": "attack-pattern--96edd229-3959-5861-a34c-22ea8ac739d0" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--53ac4ac4-fe9e-552d-a4bf-85409d438f97", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--aeb37eb7-8fd6-5dcf-8755-c8d5ff4313c8", "target_ref": "attack-pattern--cf39fa63-9044-5279-8ea5-4acb64d53904" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--308b99b0-8ef4-5c48-93f4-46d2594570d2", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--aeb37eb7-8fd6-5dcf-8755-c8d5ff4313c8", "target_ref": "attack-pattern--44a15cd3-db68-5127-b8dd-cb96e537e3b7" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7077819f-3a40-596b-ae89-1f36567d9d21", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--aeb37eb7-8fd6-5dcf-8755-c8d5ff4313c8", "target_ref": "attack-pattern--37433c31-ae6a-50f0-bfe3-22ac2f1747d9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--04cc7826-f676-524a-a880-86fef1a27d81", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--aeb37eb7-8fd6-5dcf-8755-c8d5ff4313c8", "target_ref": "attack-pattern--e66a56f1-221e-5079-bfe4-99ccbe842a5a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e3a083fb-0399-5542-9a33-41d43bd4b916", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--aeb37eb7-8fd6-5dcf-8755-c8d5ff4313c8", "target_ref": "attack-pattern--e69d7f82-fe18-5677-abba-9dd6347bc5a2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--637407de-e311-5154-a1ff-bee8459323ff", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--e51edda4-f367-53cf-8c2f-9de24e9d0629", "target_ref": "attack-pattern--44a15cd3-db68-5127-b8dd-cb96e537e3b7" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7b437a11-e82b-53df-abc3-987a19c6b807", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--e51edda4-f367-53cf-8c2f-9de24e9d0629", "target_ref": "attack-pattern--e66a56f1-221e-5079-bfe4-99ccbe842a5a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1e5bc1db-0500-5038-8d77-5db3e6245b07", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--0f1b58d1-74be-5998-b46b-542adb760210", "target_ref": "attack-pattern--f5bce1e3-3637-56df-8db9-94e793306171" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--14652cfe-f73f-5213-9c85-20b037731180", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--0f1b58d1-74be-5998-b46b-542adb760210", "target_ref": "attack-pattern--f81933a4-bfe2-528f-94ef-399577e5a682" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--562ad56e-8829-5c46-92cd-6b748ac3f412", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--4ce17e17-7a0c-5e48-a847-0e409ecb51db", "target_ref": "attack-pattern--414a6469-36be-5ecd-9603-290930d42b86" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0bbfec52-82ff-5911-8e0b-41f7bb870267", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--4ce17e17-7a0c-5e48-a847-0e409ecb51db", "target_ref": "attack-pattern--7861ffbc-2d68-5482-ba5f-32e5a630a7a6" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ad14cfa7-ab64-5312-9089-b04bba3d3e52", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--4ce17e17-7a0c-5e48-a847-0e409ecb51db", "target_ref": "attack-pattern--77b517cc-4b13-5a1b-8262-fb171254ddb5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d2590a2f-81d3-55e6-b52d-a1023c6fb2c6", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--fc1fc215-94ea-55af-a28f-eb9413afbf36", "target_ref": "attack-pattern--44a15cd3-db68-5127-b8dd-cb96e537e3b7" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e8bb032b-582f-5a0f-b725-68b90bb71216", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--46b55a28-0e44-5e76-b405-6df871aa9386", "target_ref": "attack-pattern--58002197-8183-530c-9eea-d2d8532a9008" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--30d91b2b-1396-5fa5-a485-af8daa582648", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--46b55a28-0e44-5e76-b405-6df871aa9386", "target_ref": "attack-pattern--12a37f6f-1b04-52d2-9ad3-56bca9ba3350" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5da35da8-4718-5f19-8c48-667d4b5ad443", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--46b55a28-0e44-5e76-b405-6df871aa9386", "target_ref": "attack-pattern--5deeb2fb-1df3-5566-8229-2e83bd241a08" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1fa7fb4b-7276-504d-9832-b7d788fd5489", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--46b55a28-0e44-5e76-b405-6df871aa9386", "target_ref": "attack-pattern--c6390ae8-9835-52c2-8fd7-fac5b37acc18" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9e363d13-9b8f-5b4b-bcc7-0ef21cdc6318", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--17f9c2fd-bb70-5df1-852f-d8666ff4d33a", "target_ref": "attack-pattern--0a436476-4fd9-5f9a-9735-7d7a9bf791ae" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2e0b720b-d363-5e77-8d56-997689020cbf", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--17f9c2fd-bb70-5df1-852f-d8666ff4d33a", "target_ref": "attack-pattern--801ea2cb-7842-52ae-9311-023b6cd74e62" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2d2c10ba-c129-51ba-a091-745abb832a31", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--17f9c2fd-bb70-5df1-852f-d8666ff4d33a", "target_ref": "attack-pattern--e66a56f1-221e-5079-bfe4-99ccbe842a5a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--cdef0864-826a-5e7f-8874-c09adf4ee3c0", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--17f9c2fd-bb70-5df1-852f-d8666ff4d33a", "target_ref": "attack-pattern--9b65ffc8-0be6-5809-b228-a85033f790ba" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d5ef3206-034a-5133-b206-ef92260f9d14", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--6d6e200a-20ef-598c-a0fe-4310648ce19b", "target_ref": "attack-pattern--093e472c-281c-5e78-9228-486255d3058a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2c5079e6-fc7b-54e8-bc6c-7d6901ee74c2", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--6d6e200a-20ef-598c-a0fe-4310648ce19b", "target_ref": "attack-pattern--8fea3d14-6b55-534c-986e-1c6f3d1638f2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e159e055-e0bc-54f8-8d74-41891743aa34", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--505802ed-91cb-58af-9a64-eaef51f0f7cd", "target_ref": "attack-pattern--093e472c-281c-5e78-9228-486255d3058a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4fe0d1a3-54c3-55a2-bafc-47ce9a69f5c7", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--505802ed-91cb-58af-9a64-eaef51f0f7cd", "target_ref": "attack-pattern--f5bce1e3-3637-56df-8db9-94e793306171" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--72caaac2-8c45-5708-9db0-e9dd73265d20", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--505802ed-91cb-58af-9a64-eaef51f0f7cd", "target_ref": "attack-pattern--f81933a4-bfe2-528f-94ef-399577e5a682" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4a89e84b-6e51-5822-bf75-4e302aa0a105", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--f61cbca0-4c66-5db7-9911-f83e16e4906e", "target_ref": "attack-pattern--b19923a2-b45b-5106-935d-f52d0d875a94" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3596f179-f8c6-5a38-bf38-c4b8bc235ca6", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--f61cbca0-4c66-5db7-9911-f83e16e4906e", "target_ref": "attack-pattern--03407478-76ff-57d8-bf96-1cb5b5108d9d" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--89e23e25-7d68-5eda-85f6-a8cfeda262d2", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--0e873567-2da0-588c-977b-648be78c2aa6", "target_ref": "attack-pattern--f5bce1e3-3637-56df-8db9-94e793306171" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b1aa31b0-23f1-50d5-9dbb-b84deb7540e1", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--0e873567-2da0-588c-977b-648be78c2aa6", "target_ref": "attack-pattern--f81933a4-bfe2-528f-94ef-399577e5a682" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6f6e71e7-3162-5657-af3f-e4aa98a3d7b9", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--0e873567-2da0-588c-977b-648be78c2aa6", "target_ref": "attack-pattern--e9d0e479-5424-55c4-ab48-976a7a671010" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c6906b61-9665-5c0c-abe5-7e093c9b834c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--d8b98a22-9455-56f4-b052-2fdc8afdbeba", "target_ref": "attack-pattern--2a21b0c6-c06c-5130-9114-0d760dcb5b2c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d4cb7e40-2ad7-5dae-8696-ac7f5cbb395f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--d8b98a22-9455-56f4-b052-2fdc8afdbeba", "target_ref": "attack-pattern--d56864b8-d792-56b8-8190-be436238825d" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7e45affc-3703-52aa-bb18-00d15600420b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--7f0dd841-f42f-5b82-817d-bd301cb2ed86", "target_ref": "attack-pattern--9b65ffc8-0be6-5809-b228-a85033f790ba" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e5991344-9fc4-53c7-b6cb-f7a568ccf62e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--21a7e6df-3a60-5443-b04f-f0baeafddcb0", "target_ref": "attack-pattern--44a15cd3-db68-5127-b8dd-cb96e537e3b7" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--530102d7-42eb-526e-897b-9e6b7a3722a8", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--21a7e6df-3a60-5443-b04f-f0baeafddcb0", "target_ref": "attack-pattern--96edd229-3959-5861-a34c-22ea8ac739d0" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--32c01f5b-a051-5cf7-a62a-76ed4bb9d065", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--effb17e8-8221-55ef-a078-47f75c1c0793", "target_ref": "attack-pattern--f81933a4-bfe2-528f-94ef-399577e5a682" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--904f5a88-a50a-5c70-ac7a-73bda8b21191", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--effb17e8-8221-55ef-a078-47f75c1c0793", "target_ref": "attack-pattern--df0b8ece-6ded-558d-9e29-22e289c4243b" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--08cd0ba2-b1e4-57b4-a985-6a4671bfc3f5", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--effb17e8-8221-55ef-a078-47f75c1c0793", "target_ref": "attack-pattern--50650ed5-e07d-5fe8-9adf-7adb33f8182e" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--adb54400-d3dc-57dc-a7dc-c10a97910115", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--974e9ee4-a39b-50b4-8596-3867f94fbfc9", "target_ref": "attack-pattern--50650ed5-e07d-5fe8-9adf-7adb33f8182e" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2f6cd13a-06e9-5b48-951b-20c8d7ab3e03", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--9043ef46-efac-5ecf-9da1-02406ae6b3bc", "target_ref": "attack-pattern--d56864b8-d792-56b8-8190-be436238825d" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5b090d01-1f20-5d5e-8ce2-e492a17c2564", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--89128ba8-ac9b-5513-ba8d-be2ad5aac2b4", "target_ref": "attack-pattern--e3ca28d4-2eb0-5329-96df-65f6a1363709" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1b48b1da-5410-55d7-a3d2-a2279953b089", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--89128ba8-ac9b-5513-ba8d-be2ad5aac2b4", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--839d137a-a423-5bd6-9d6d-ffc9578652f9", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--89128ba8-ac9b-5513-ba8d-be2ad5aac2b4", "target_ref": "attack-pattern--9b65ffc8-0be6-5809-b228-a85033f790ba" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f65b0f02-6fa1-5c07-b9b5-6353a7f9f811", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--9e385d8d-0b67-5afb-925c-3eac747446aa", "target_ref": "attack-pattern--419b5ccf-6a56-5639-a130-82e3f14a544e" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--586ed666-f421-523f-9a87-10d4078f617a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--9e385d8d-0b67-5afb-925c-3eac747446aa", "target_ref": "attack-pattern--8e90a636-2bbf-5517-9dc5-1516e3ff0df6" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2b26351d-8440-51db-80b5-1d6c32c3d245", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--03aa5709-e21f-5ac6-bd56-13d007c62e6e", "target_ref": "attack-pattern--f5bce1e3-3637-56df-8db9-94e793306171" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f75d96a9-de22-54a4-8a97-41ec666f75db", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--03aa5709-e21f-5ac6-bd56-13d007c62e6e", "target_ref": "attack-pattern--f81933a4-bfe2-528f-94ef-399577e5a682" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--343afa61-6878-570e-8f35-6e52db96a898", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--812e75e4-8081-554c-bc25-fb690db237f6", "target_ref": "attack-pattern--093e472c-281c-5e78-9228-486255d3058a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4557528b-d9ce-577a-a497-fa764b244073", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--812e75e4-8081-554c-bc25-fb690db237f6", "target_ref": "attack-pattern--f81933a4-bfe2-528f-94ef-399577e5a682" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--fa21a40e-28ff-5b67-9db2-732f77ea0e6b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--812e75e4-8081-554c-bc25-fb690db237f6", "target_ref": "attack-pattern--fd40fed2-9093-5b5a-8ebd-5b288e3ae6c5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--fc2fa205-8db9-532f-b0c7-1522763d675d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--9589c0d4-664c-5fa3-aa8e-9b909fa367bf", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--339298d9-bf59-567b-a164-bf83971f6e43", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--9589c0d4-664c-5fa3-aa8e-9b909fa367bf", "target_ref": "attack-pattern--f5bce1e3-3637-56df-8db9-94e793306171" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--dc1c4585-d771-53bb-8064-0652bc711bd1", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--9589c0d4-664c-5fa3-aa8e-9b909fa367bf", "target_ref": "attack-pattern--50650ed5-e07d-5fe8-9adf-7adb33f8182e" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ba862f81-a307-5599-b7c7-7a2399c1e2ad", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--206bb25e-ed02-5389-833b-0395a53dd3b3", "target_ref": "attack-pattern--e3ca28d4-2eb0-5329-96df-65f6a1363709" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d1dec4e4-9a05-527d-9528-cae25896d78f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--206bb25e-ed02-5389-833b-0395a53dd3b3", "target_ref": "attack-pattern--9b65ffc8-0be6-5809-b228-a85033f790ba" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b462730a-3919-57fc-84a6-3c0b2d6c73d9", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--23b98df5-b5f1-5d04-83de-b93a383e4fb0", "target_ref": "attack-pattern--cf39fa63-9044-5279-8ea5-4acb64d53904" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--bf56dded-47fe-5347-ae31-1f7c3eeac669", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--23b98df5-b5f1-5d04-83de-b93a383e4fb0", "target_ref": "attack-pattern--0de49898-b977-5cf7-9608-eff3285c50c7" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--248b2721-eaeb-50eb-b1e5-e5e7aba239c5", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--23b98df5-b5f1-5d04-83de-b93a383e4fb0", "target_ref": "attack-pattern--e66a56f1-221e-5079-bfe4-99ccbe842a5a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0e30a205-1e5a-567b-abef-45f4f532f3ad", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--23b98df5-b5f1-5d04-83de-b93a383e4fb0", "target_ref": "attack-pattern--5d6fd913-d256-5849-b154-bff6af32ce81" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--48ba43a9-ac7a-5a59-bbe6-a97a918c8f6e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--77f36dee-d487-5bb1-8e2b-a666a955eb68", "target_ref": "attack-pattern--96edd229-3959-5861-a34c-22ea8ac739d0" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7ad0486e-cded-5a61-9ae2-4fc261182376", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--630aa982-14a8-539d-8bcd-d18b255c2a69", "target_ref": "attack-pattern--44a15cd3-db68-5127-b8dd-cb96e537e3b7" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--11609cff-01da-5ef6-a52d-de6a3fba8199", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--630aa982-14a8-539d-8bcd-d18b255c2a69", "target_ref": "attack-pattern--e66a56f1-221e-5079-bfe4-99ccbe842a5a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--efb361f9-cce7-59f7-ac62-88fe11a4caa5", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--2b83881e-8eeb-58d3-8ebd-21da4b0f2ed8", "target_ref": "attack-pattern--5d6fd913-d256-5849-b154-bff6af32ce81" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c5293a40-0236-570c-b372-48b5284929b3", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--f91d87e5-6c85-5642-b8a5-13f64493a9c4", "target_ref": "attack-pattern--03407478-76ff-57d8-bf96-1cb5b5108d9d" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6adea264-6420-5546-bfe4-d66c4a1007e5", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--f91d87e5-6c85-5642-b8a5-13f64493a9c4", "target_ref": "attack-pattern--3be95af9-48b3-56a3-8e57-f07ac58e27f2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a10629de-3e72-5224-a1b3-fd0003094724", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--f91d87e5-6c85-5642-b8a5-13f64493a9c4", "target_ref": "attack-pattern--b6a77deb-14ae-59e3-b4b2-b73065972b6c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1b14a158-7539-5878-acfb-f2132653f776", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--8505ae37-b646-5266-8404-e6ccb3c46505", "target_ref": "attack-pattern--f5bce1e3-3637-56df-8db9-94e793306171" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--680b5b7e-5b23-5942-9e15-1585ac6211f0", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--feabc67c-9918-5042-b47e-5b1784ddea0f", "target_ref": "attack-pattern--e3ca28d4-2eb0-5329-96df-65f6a1363709" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--96a940cb-303f-561d-9770-5db6e352fd2f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--feabc67c-9918-5042-b47e-5b1784ddea0f", "target_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9d1c3deb-d10b-5b54-b1cc-9d9c60dc6417", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--88c25678-f93e-57bb-97e8-2045452935f1", "target_ref": "attack-pattern--44a15cd3-db68-5127-b8dd-cb96e537e3b7" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f74357ab-02f8-581b-b9fd-974f4575d63f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--86e831d2-9027-5d0b-baea-f09eda0297d9", "target_ref": "attack-pattern--f5bce1e3-3637-56df-8db9-94e793306171" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5ea5e203-aaf1-5434-86ca-e99e3d9d17ce", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--86e831d2-9027-5d0b-baea-f09eda0297d9", "target_ref": "attack-pattern--f81933a4-bfe2-528f-94ef-399577e5a682" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3cdb5bf1-ae17-5403-8679-ae7b21c384cb", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--86e831d2-9027-5d0b-baea-f09eda0297d9", "target_ref": "attack-pattern--9b65ffc8-0be6-5809-b228-a85033f790ba" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3badcd57-5d5e-521c-819b-846211d6e84d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--7f59cfc8-efaf-5c3d-af97-1149ee757c62", "target_ref": "attack-pattern--9b65ffc8-0be6-5809-b228-a85033f790ba" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--cf7c1759-be78-5eb6-a2ef-60b409d288ae", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--c667fab3-dcdb-54c2-8cb0-01ed2f8103ff", "target_ref": "attack-pattern--cf39fa63-9044-5279-8ea5-4acb64d53904" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7106447a-6560-5ad8-b6bf-0e981ca70b0d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--c667fab3-dcdb-54c2-8cb0-01ed2f8103ff", "target_ref": "attack-pattern--e66a56f1-221e-5079-bfe4-99ccbe842a5a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--090c40ca-0785-56c0-8fdd-0e4368c4dbff", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--2ceab430-f99c-5515-8aa6-148803f3d034", "target_ref": "attack-pattern--f5bce1e3-3637-56df-8db9-94e793306171" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--97b6ee2a-b89f-591c-84df-102b0218dafe", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--ef8dda21-786b-562c-88b3-b04938a179e2", "target_ref": "attack-pattern--44a15cd3-db68-5127-b8dd-cb96e537e3b7" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d2e77b88-2545-5ebd-9a6d-5138cda2323a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--7b01ae06-6b28-59e5-8838-d3adac010d94", "target_ref": "attack-pattern--7861ffbc-2d68-5482-ba5f-32e5a630a7a6" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--31c32a55-5f0e-5c81-9834-4ee50b4f1569", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--7b01ae06-6b28-59e5-8838-d3adac010d94", "target_ref": "attack-pattern--77b517cc-4b13-5a1b-8262-fb171254ddb5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--77c903c6-dd5e-5242-8887-a7dd5142c1f7", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--7b01ae06-6b28-59e5-8838-d3adac010d94", "target_ref": "attack-pattern--453ebde2-a358-531b-99b5-c9b532a849b8" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2b9a86a9-c545-555f-9b11-b593a5ab14e3", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--8d5f9063-981e-5592-bcfb-cb921d2c7974", "target_ref": "attack-pattern--9552d7a9-3083-569f-a641-d880fc8a27d5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--fe7a399c-2a35-5be9-b366-b78a020154b3", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--8d5f9063-981e-5592-bcfb-cb921d2c7974", "target_ref": "attack-pattern--8ebc4ef1-736a-5a29-a376-a008444a2d2f" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--679f99f3-f87e-5920-8392-e4f14b1969ee", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--8d5f9063-981e-5592-bcfb-cb921d2c7974", "target_ref": "attack-pattern--4cad59ea-0942-5afc-a239-32ab4e740836" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d8969ab1-4785-5da0-923c-300ea009467f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--d253b118-7f87-583f-b8f9-49f72fdb7baf", "target_ref": "attack-pattern--1a600b6f-3cbd-5141-822e-9577e857e9ec" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0bf72fbb-63ee-5ca3-a4ac-5b1b85ddf08f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--d253b118-7f87-583f-b8f9-49f72fdb7baf", "target_ref": "attack-pattern--5deeb2fb-1df3-5566-8229-2e83bd241a08" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c15d99cf-f62f-5012-86fc-915e87dce60b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--5d5fda06-87ec-5930-80ad-dc2d0da760f1", "target_ref": "attack-pattern--0de49898-b977-5cf7-9608-eff3285c50c7" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--df7803f5-9b1a-5664-9e9f-acdcd6d1f6ad", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--5d5fda06-87ec-5930-80ad-dc2d0da760f1", "target_ref": "attack-pattern--9b65ffc8-0be6-5809-b228-a85033f790ba" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9d2affaf-2ef8-5a74-8286-90683bcafb0a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--372f6d56-1f45-5c8c-b48e-64e3c78a87c6", "target_ref": "attack-pattern--9b65ffc8-0be6-5809-b228-a85033f790ba" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--58687013-5751-5590-91a2-77009baf1cd7", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--372f6d56-1f45-5c8c-b48e-64e3c78a87c6", "target_ref": "attack-pattern--50650ed5-e07d-5fe8-9adf-7adb33f8182e" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6b5c4ec7-f1e9-5520-bd2a-869c4868e190", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--717df0ae-35d0-502d-8884-32d1690c48be", "target_ref": "attack-pattern--9b65ffc8-0be6-5809-b228-a85033f790ba" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--012e8949-b9d8-5659-a160-990204e08eba", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--717df0ae-35d0-502d-8884-32d1690c48be", "target_ref": "attack-pattern--50650ed5-e07d-5fe8-9adf-7adb33f8182e" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7a2cb8ee-3eb8-5ad4-b86a-082f2bf80668", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--2bedc5d8-31ad-5a91-81fe-e7ee29d9e49b", "target_ref": "attack-pattern--f81933a4-bfe2-528f-94ef-399577e5a682" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0e8cf155-eb7b-5040-9df7-fbbaf6f633fc", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--2bedc5d8-31ad-5a91-81fe-e7ee29d9e49b", "target_ref": "attack-pattern--9b65ffc8-0be6-5809-b228-a85033f790ba" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b9da56b3-36a9-5d7e-95a4-5233293ccf2c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--f9b6a58b-7460-5741-b510-97e548f262c6", "target_ref": "attack-pattern--50650ed5-e07d-5fe8-9adf-7adb33f8182e" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1462e23e-f2ea-5a73-99f2-59f371bc71f7", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--97979800-e0f4-5648-b3a7-64eac3ca254f", "target_ref": "attack-pattern--040f06e8-1825-51bd-8145-52c5b97b26d5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b62dc05e-6ec4-5101-bf3b-5b73da1c3113", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--436f0708-da26-587b-bbb5-0a6dd836b471", "target_ref": "attack-pattern--e3ca28d4-2eb0-5329-96df-65f6a1363709" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4cd03e5b-ec5a-51e6-876e-9273a7af1a64", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--436f0708-da26-587b-bbb5-0a6dd836b471", "target_ref": "attack-pattern--9b65ffc8-0be6-5809-b228-a85033f790ba" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--60180196-e6f1-5dd5-9a4e-157f76dc4667", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--d08dfa8b-3c16-5ac5-971d-f469e1f1a48f", "target_ref": "attack-pattern--50650ed5-e07d-5fe8-9adf-7adb33f8182e" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--42ed01f2-daed-5853-9670-d53a5e4bfa74", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--67b6e607-5968-5695-9f36-6f73e7c75ae4", "target_ref": "attack-pattern--a7929123-b1d5-5eee-b042-dc7812bdd713" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d7c49dd8-3a68-5ef5-a826-fd76bafaeffb", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--67b6e607-5968-5695-9f36-6f73e7c75ae4", "target_ref": "attack-pattern--921bd515-01df-5ee1-a643-7138f8d1ee7c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b18b6394-a876-50bd-a48f-91007bf247d8", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--5364cc6f-320d-549f-9bc5-97cb4190261f", "target_ref": "attack-pattern--44a15cd3-db68-5127-b8dd-cb96e537e3b7" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4011e277-8a59-5cc4-8aa4-384191cd2a28", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--25849a83-9266-5673-a50e-d44261f71d34", "target_ref": "attack-pattern--473b0aa4-1cea-57d5-a0a1-9114ebeb1de6" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--bed5dc34-5a21-5f42-8b70-029db0fbe704", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--25849a83-9266-5673-a50e-d44261f71d34", "target_ref": "attack-pattern--51de129b-35c6-52ab-baa1-4952b944dad8" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--60954b45-14c5-5e11-bb50-c38812935b0c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--99517094-eb0c-5a1d-89cb-d708c4ec6f76", "target_ref": "attack-pattern--320f06d5-906a-5b2f-a737-01b09ce60315" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a431a0c2-9feb-5c00-95b4-e8e5ab579263", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--99517094-eb0c-5a1d-89cb-d708c4ec6f76", "target_ref": "attack-pattern--79d99263-2431-5abd-bf5f-2869979031be" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--48178db0-3bf1-5ef3-a3e3-8afa6ed64748", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--4c2b4e8f-c8b4-52d4-b40f-2ad58f0a8617", "target_ref": "attack-pattern--9b65ffc8-0be6-5809-b228-a85033f790ba" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f1602344-9204-5236-abba-d340d2f552aa", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--914af82e-9fc4-5e83-96c6-421663d2a28c", "target_ref": "attack-pattern--44a15cd3-db68-5127-b8dd-cb96e537e3b7" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--66da4127-cf05-57d5-be60-26c9ebf3f6bd", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--914af82e-9fc4-5e83-96c6-421663d2a28c", "target_ref": "attack-pattern--9b65ffc8-0be6-5809-b228-a85033f790ba" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6f4c16b2-69e3-5e40-9203-be26ba88e97d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--692bf9e6-2a8b-51a7-9bf4-282b021827c7", "target_ref": "attack-pattern--f81933a4-bfe2-528f-94ef-399577e5a682" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5b7d12e3-2883-527e-94ed-318923343543", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--692bf9e6-2a8b-51a7-9bf4-282b021827c7", "target_ref": "attack-pattern--9b65ffc8-0be6-5809-b228-a85033f790ba" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--abbd3370-0d6b-5748-a741-095228d1ca0b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--24cbcd77-8d17-5d7d-8fa9-d7c466708ef5", "target_ref": "attack-pattern--cf39fa63-9044-5279-8ea5-4acb64d53904" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c8c05c27-da44-55f9-986c-781b82b18435", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--24cbcd77-8d17-5d7d-8fa9-d7c466708ef5", "target_ref": "attack-pattern--2a21b0c6-c06c-5130-9114-0d760dcb5b2c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--92e7df1c-4e9e-55ae-8d2d-79210546e5c0", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--24cbcd77-8d17-5d7d-8fa9-d7c466708ef5", "target_ref": "attack-pattern--9b65ffc8-0be6-5809-b228-a85033f790ba" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--492b20da-ad43-5904-9d75-c0265d586f90", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--c8ecd20a-f7a4-5e79-a68c-911263e7e35d", "target_ref": "attack-pattern--e66a56f1-221e-5079-bfe4-99ccbe842a5a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--40990a4d-9412-5896-bb68-bc5d6fa7c235", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--c8ecd20a-f7a4-5e79-a68c-911263e7e35d", "target_ref": "attack-pattern--9b65ffc8-0be6-5809-b228-a85033f790ba" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f1d3af1e-b45a-52ee-83ec-56a36b9e4d0a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--c8ecd20a-f7a4-5e79-a68c-911263e7e35d", "target_ref": "attack-pattern--e9d0e479-5424-55c4-ab48-976a7a671010" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--71d9a7ff-37cf-50a5-a006-a4c43ea26d08", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--4066fecb-90c1-5679-b605-ec12064a9a8c", "target_ref": "attack-pattern--f5bce1e3-3637-56df-8db9-94e793306171" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b43db4b4-1fcc-59df-820f-a01a804b04ac", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--4066fecb-90c1-5679-b605-ec12064a9a8c", "target_ref": "attack-pattern--f81933a4-bfe2-528f-94ef-399577e5a682" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ee22e8e8-4ca2-5888-9c86-2ef7803d4efb", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--7436d684-810b-5fcf-af82-13a75e6f4867", "target_ref": "attack-pattern--44a15cd3-db68-5127-b8dd-cb96e537e3b7" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0e5aff1c-c158-55d9-851d-4882e11e787d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--7436d684-810b-5fcf-af82-13a75e6f4867", "target_ref": "attack-pattern--2a21b0c6-c06c-5130-9114-0d760dcb5b2c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--56cc1842-bb1a-5e13-921d-bb1328d9c33b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--7436d684-810b-5fcf-af82-13a75e6f4867", "target_ref": "attack-pattern--f5bce1e3-3637-56df-8db9-94e793306171" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9da62b84-cfd2-59a6-a46d-2e1ef0a0032a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--7436d684-810b-5fcf-af82-13a75e6f4867", "target_ref": "attack-pattern--f81933a4-bfe2-528f-94ef-399577e5a682" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--63f1f2a8-bf2b-5d96-a8bb-022f452103c4", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--7436d684-810b-5fcf-af82-13a75e6f4867", "target_ref": "attack-pattern--9b65ffc8-0be6-5809-b228-a85033f790ba" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e077e3e2-1b51-5fb6-a249-32544220b273", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--7436d684-810b-5fcf-af82-13a75e6f4867", "target_ref": "attack-pattern--e9d0e479-5424-55c4-ab48-976a7a671010" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6e2edb75-aaf5-504f-9c0a-a45abfc28f7d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--73b27c91-43a7-5a7a-9d00-8df56aaba351", "target_ref": "attack-pattern--91a0a76b-eaf0-5e8a-b6b9-7f62268ce853" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c18db524-e9ab-58c5-a847-6426e17106e2", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--73b27c91-43a7-5a7a-9d00-8df56aaba351", "target_ref": "attack-pattern--aa324a54-0e77-513e-bc77-dea4683702d2" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e460a81d-e533-5ec1-ba8d-3d559900925a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--73b27c91-43a7-5a7a-9d00-8df56aaba351", "target_ref": "attack-pattern--ea13efc1-d0df-532c-8add-3d39dcd29713" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--dd4f7da3-51e1-5e26-b7ba-d1fe02e022c6", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "demonstrates", "source_ref": "x-oak-incident--73b27c91-43a7-5a7a-9d00-8df56aaba351", "target_ref": "attack-pattern--5deeb2fb-1df3-5566-8229-2e83bd241a08" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3da0a7e9-488a-5b21-9d61-a8c9ba147665", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--3113300f-d067-5bda-b93a-de6cb0044037", "target_ref": "x-oak-tactic--2e70bb4c-e25c-5123-b9aa-c8f5f53ca2f0" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c8e64c3f-cb8e-5ab6-a64c-0b2464f355e7", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--3113300f-d067-5bda-b93a-de6cb0044037", "target_ref": "x-oak-tactic--7fa7f00b-059a-5a92-b145-0893b4530bb6" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--407f92ca-941f-513e-a4ef-7680de38aafb", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--91a0a76b-eaf0-5e8a-b6b9-7f62268ce853", "target_ref": "x-oak-tactic--2e70bb4c-e25c-5123-b9aa-c8f5f53ca2f0" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--32e77d45-1755-5fc7-a60f-a5aebd971a88", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--91a0a76b-eaf0-5e8a-b6b9-7f62268ce853", "target_ref": "x-oak-tactic--7fa7f00b-059a-5a92-b145-0893b4530bb6" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8fdbaf28-f8a9-5a51-bce7-11d09afab110", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--aa324a54-0e77-513e-bc77-dea4683702d2", "target_ref": "x-oak-tactic--2e70bb4c-e25c-5123-b9aa-c8f5f53ca2f0" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--bc9a566d-ef5e-55c9-8562-94ea4ff8bac0", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--aa324a54-0e77-513e-bc77-dea4683702d2", "target_ref": "x-oak-tactic--7fa7f00b-059a-5a92-b145-0893b4530bb6" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--56e84f12-640a-5a46-bf99-45d45efcaa0d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--e45221c4-74e9-52ab-8e20-96d05003d65a", "target_ref": "x-oak-tactic--2e70bb4c-e25c-5123-b9aa-c8f5f53ca2f0" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--75aa6786-4f2f-5c0e-b541-98cb7ffe1512", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--e45221c4-74e9-52ab-8e20-96d05003d65a", "target_ref": "x-oak-tactic--7fa7f00b-059a-5a92-b145-0893b4530bb6" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7f6d5fb7-acbb-5e11-9777-3e0ae0bd56a3", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--00534efe-a713-54c9-9ef3-5b12fd6d0c01", "target_ref": "x-oak-tactic--2e70bb4c-e25c-5123-b9aa-c8f5f53ca2f0" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--fb53f13f-11af-5544-851e-2119aab00b29", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--00534efe-a713-54c9-9ef3-5b12fd6d0c01", "target_ref": "x-oak-tactic--7fa7f00b-059a-5a92-b145-0893b4530bb6" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8fca0341-88ce-50ea-bfd9-8548e62b3812", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--c90dbca1-780a-54c2-a24e-3f6d4472a134", "target_ref": "x-oak-tactic--2e70bb4c-e25c-5123-b9aa-c8f5f53ca2f0" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--07d09cce-bdc6-572c-8cd6-b276a37b642f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--f80bec40-b7fa-52eb-a6a4-d4acd59dce38", "target_ref": "x-oak-tactic--2e70bb4c-e25c-5123-b9aa-c8f5f53ca2f0" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4110840a-8b74-5ec0-8bbc-29032fbee6ca", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--f80bec40-b7fa-52eb-a6a4-d4acd59dce38", "target_ref": "x-oak-tactic--7fa7f00b-059a-5a92-b145-0893b4530bb6" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--51a9c6ce-1351-51e6-b24c-b4cffa24e6f7", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--cf39fa63-9044-5279-8ea5-4acb64d53904", "target_ref": "x-oak-tactic--54ff19cd-6a14-595b-be41-49018e597919" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2b826222-d92e-51ad-b4c0-ae2d459cff3e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--44a15cd3-db68-5127-b8dd-cb96e537e3b7", "target_ref": "x-oak-tactic--54ff19cd-6a14-595b-be41-49018e597919" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c556eaa0-395d-5b11-bee3-d621e71bc52b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--96edd229-3959-5861-a34c-22ea8ac739d0", "target_ref": "x-oak-tactic--54ff19cd-6a14-595b-be41-49018e597919" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--385e8756-8baf-5ca8-a592-29037940da8d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--96edd229-3959-5861-a34c-22ea8ac739d0", "target_ref": "x-oak-tactic--2e70bb4c-e25c-5123-b9aa-c8f5f53ca2f0" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f14d75e7-434e-5189-9b77-76027f2ad89f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "subtechnique-of", "source_ref": "attack-pattern--96edd229-3959-5861-a34c-22ea8ac739d0", "target_ref": "attack-pattern--44a15cd3-db68-5127-b8dd-cb96e537e3b7" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--90b4014e-ef6f-5235-8ab7-73095783235f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--37433c31-ae6a-50f0-bfe3-22ac2f1747d9", "target_ref": "x-oak-tactic--54ff19cd-6a14-595b-be41-49018e597919" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--82c295ed-40aa-5dce-8ee4-d6fd4f57daf2", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--8a373cd0-d1fc-5d17-916d-993d5cd3e7c1", "target_ref": "x-oak-tactic--54ff19cd-6a14-595b-be41-49018e597919" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f13a5c3b-1b8e-525e-a393-94d6c52323bd", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--4950a164-f5b6-579d-b44d-af445947d99e", "target_ref": "x-oak-tactic--54ff19cd-6a14-595b-be41-49018e597919" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--10a1649b-c2ce-5d94-9450-c1b7c660b462", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--0a436476-4fd9-5f9a-9735-7d7a9bf791ae", "target_ref": "x-oak-tactic--54ff19cd-6a14-595b-be41-49018e597919" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2c247882-254f-5c52-a88d-41ceb2547169", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--6cfeff7d-dc66-543b-b2f6-8e5e232156bc", "target_ref": "x-oak-tactic--54ff19cd-6a14-595b-be41-49018e597919" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--67e5c6f4-66fd-578a-96f1-29174ff9102e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--801ea2cb-7842-52ae-9311-023b6cd74e62", "target_ref": "x-oak-tactic--54ff19cd-6a14-595b-be41-49018e597919" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--51443c78-1909-5568-9973-898edb9327dd", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--2a21b0c6-c06c-5130-9114-0d760dcb5b2c", "target_ref": "x-oak-tactic--a05710d6-773d-5671-81e6-1a9d53ce156a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--90beb895-e163-5635-9752-b1ac360b42d7", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--9552d7a9-3083-569f-a641-d880fc8a27d5", "target_ref": "x-oak-tactic--a05710d6-773d-5671-81e6-1a9d53ce156a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4af909c8-f20a-5ce0-8d0b-09207d8d0dce", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--0de49898-b977-5cf7-9608-eff3285c50c7", "target_ref": "x-oak-tactic--a05710d6-773d-5671-81e6-1a9d53ce156a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--649f9734-01f8-5ea3-a40d-74019cce717f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--0de49898-b977-5cf7-9608-eff3285c50c7", "target_ref": "x-oak-tactic--d3f737a3-09cc-571c-88eb-d5e9e251167d" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9385c6cc-b0a0-5488-bc4c-c9eb3df42f9c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--052caee2-c494-51c7-87d3-0b5ae531eeb2", "target_ref": "x-oak-tactic--a05710d6-773d-5671-81e6-1a9d53ce156a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2e89b04f-a28f-5613-8192-283a6e2000f2", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--f43b3cdc-ed19-5ad0-b661-706c665d9f83", "target_ref": "x-oak-tactic--a05710d6-773d-5671-81e6-1a9d53ce156a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9b3d1bce-18f4-54a7-93e0-807920ed6279", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--6d6dfb01-6c40-58c3-ac5a-98b6042866bd", "target_ref": "x-oak-tactic--a05710d6-773d-5671-81e6-1a9d53ce156a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--518855ed-dfbc-5ecc-95d0-675ebf8b1bde", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--6d6dfb01-6c40-58c3-ac5a-98b6042866bd", "target_ref": "x-oak-tactic--2e70bb4c-e25c-5123-b9aa-c8f5f53ca2f0" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b677c2e1-23a3-544b-8b24-5c910582a52e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "subtechnique-of", "source_ref": "attack-pattern--6d6dfb01-6c40-58c3-ac5a-98b6042866bd", "target_ref": "attack-pattern--f43b3cdc-ed19-5ad0-b661-706c665d9f83" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--57b57152-d4a2-5ca7-bf5d-6784bb82f63c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--aebe2a72-a361-5ab4-8465-3a32a4dbd638", "target_ref": "x-oak-tactic--a05710d6-773d-5671-81e6-1a9d53ce156a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9df0ab4e-d1f7-5c9a-9555-db5f23e59af3", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--aebe2a72-a361-5ab4-8465-3a32a4dbd638", "target_ref": "x-oak-tactic--2e70bb4c-e25c-5123-b9aa-c8f5f53ca2f0" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--675e3606-48d4-589e-8584-baea41f57c8c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "subtechnique-of", "source_ref": "attack-pattern--aebe2a72-a361-5ab4-8465-3a32a4dbd638", "target_ref": "attack-pattern--f43b3cdc-ed19-5ad0-b661-706c665d9f83" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f053bdc7-1450-5c7d-82cc-35bdedf958e0", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--a9cff60c-a2e1-5a72-ad92-358506cc8678", "target_ref": "x-oak-tactic--a05710d6-773d-5671-81e6-1a9d53ce156a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b892dff6-4eb9-5c71-96c8-b2bfe202c094", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--a9cff60c-a2e1-5a72-ad92-358506cc8678", "target_ref": "x-oak-tactic--2e70bb4c-e25c-5123-b9aa-c8f5f53ca2f0" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--497bb055-a5fa-5f51-9813-ea1d16fe410c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "subtechnique-of", "source_ref": "attack-pattern--a9cff60c-a2e1-5a72-ad92-358506cc8678", "target_ref": "attack-pattern--f43b3cdc-ed19-5ad0-b661-706c665d9f83" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--48080460-6883-53ae-8abf-a8d0f1592b24", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--0fd4fcde-3464-5d2d-86ac-7c68035870a3", "target_ref": "x-oak-tactic--a05710d6-773d-5671-81e6-1a9d53ce156a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--af6be669-4661-5e17-8626-f316189b8ecd", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--8ebc4ef1-736a-5a29-a376-a008444a2d2f", "target_ref": "x-oak-tactic--a05710d6-773d-5671-81e6-1a9d53ce156a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--bdded107-5ccb-5122-ae7a-19fb71778003", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--8ebc4ef1-736a-5a29-a376-a008444a2d2f", "target_ref": "x-oak-tactic--2e70bb4c-e25c-5123-b9aa-c8f5f53ca2f0" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--875abf38-ee50-5571-9636-f7e49a9d74ab", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "subtechnique-of", "source_ref": "attack-pattern--8ebc4ef1-736a-5a29-a376-a008444a2d2f", "target_ref": "attack-pattern--0fd4fcde-3464-5d2d-86ac-7c68035870a3" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--97d72600-ae4d-5288-a2d3-10ac6a356d7f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--19b22847-2104-5eb9-a74c-4e7ef6195ab8", "target_ref": "x-oak-tactic--a05710d6-773d-5671-81e6-1a9d53ce156a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b844586d-3176-5c94-a0c0-39e40968e659", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--19b22847-2104-5eb9-a74c-4e7ef6195ab8", "target_ref": "x-oak-tactic--2e70bb4c-e25c-5123-b9aa-c8f5f53ca2f0" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--179ed47c-788c-5082-bb86-b8beccffedbe", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "subtechnique-of", "source_ref": "attack-pattern--19b22847-2104-5eb9-a74c-4e7ef6195ab8", "target_ref": "attack-pattern--0fd4fcde-3464-5d2d-86ac-7c68035870a3" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--529931a0-fd88-59f3-9597-0568dbc88d5f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--040f06e8-1825-51bd-8145-52c5b97b26d5", "target_ref": "x-oak-tactic--a05710d6-773d-5671-81e6-1a9d53ce156a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--983fba1e-8520-5de8-97d5-9b3f972ac387", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--88316cc3-a9f9-5dc9-96e0-0f8889ca0234", "target_ref": "x-oak-tactic--a05710d6-773d-5671-81e6-1a9d53ce156a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a4fd0785-e246-58e3-8a36-caa417336af3", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--88316cc3-a9f9-5dc9-96e0-0f8889ca0234", "target_ref": "x-oak-tactic--2e70bb4c-e25c-5123-b9aa-c8f5f53ca2f0" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--01367ce3-3000-5a4e-8f13-f2631f7a4960", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "subtechnique-of", "source_ref": "attack-pattern--88316cc3-a9f9-5dc9-96e0-0f8889ca0234", "target_ref": "attack-pattern--040f06e8-1825-51bd-8145-52c5b97b26d5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--649348d4-8fe2-50f4-b028-d1f1931be9cf", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--fef61756-5074-52ac-8731-3cd76a564130", "target_ref": "x-oak-tactic--a05710d6-773d-5671-81e6-1a9d53ce156a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--aa90cc5a-cb0e-5edc-8bad-f49e7c88865b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--fef61756-5074-52ac-8731-3cd76a564130", "target_ref": "x-oak-tactic--2e70bb4c-e25c-5123-b9aa-c8f5f53ca2f0" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6bd05f4b-6486-5311-b4f1-00a45beb734f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "subtechnique-of", "source_ref": "attack-pattern--fef61756-5074-52ac-8731-3cd76a564130", "target_ref": "attack-pattern--040f06e8-1825-51bd-8145-52c5b97b26d5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--78a9dff8-7156-5cea-807f-56af6daca500", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--8477975b-da56-555e-8bc4-de888d978403", "target_ref": "x-oak-tactic--a05710d6-773d-5671-81e6-1a9d53ce156a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--89ca1e22-dfd8-53a3-9c90-751542971a7c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--8477975b-da56-555e-8bc4-de888d978403", "target_ref": "x-oak-tactic--2e70bb4c-e25c-5123-b9aa-c8f5f53ca2f0" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3df28128-d5bc-54f9-99c6-cdc85341af19", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "subtechnique-of", "source_ref": "attack-pattern--8477975b-da56-555e-8bc4-de888d978403", "target_ref": "attack-pattern--040f06e8-1825-51bd-8145-52c5b97b26d5" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--24969126-0ef4-531b-b4a6-6a1a1a75fb2f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--0955e8c5-f474-5ac6-bbb8-b53b80ef6c0b", "target_ref": "x-oak-tactic--a05710d6-773d-5671-81e6-1a9d53ce156a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--496ff2d1-6d2b-5950-b3ed-410bf9c57312", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--414a6469-36be-5ecd-9603-290930d42b86", "target_ref": "x-oak-tactic--a05710d6-773d-5671-81e6-1a9d53ce156a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--36d96dab-194a-5fe1-86cc-28f005a510a6", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--bf1f9ad7-4abc-5204-8d5c-d597d194c7e0", "target_ref": "x-oak-tactic--a05710d6-773d-5671-81e6-1a9d53ce156a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e061dcef-4c6f-503c-8889-9d717660b6eb", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--d56864b8-d792-56b8-8190-be436238825d", "target_ref": "x-oak-tactic--a05710d6-773d-5671-81e6-1a9d53ce156a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2cc1399a-c881-5efe-bddc-790aec200a1f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--4cad59ea-0942-5afc-a239-32ab4e740836", "target_ref": "x-oak-tactic--a05710d6-773d-5671-81e6-1a9d53ce156a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7dffb5eb-937b-5b8e-859b-5d2bd5e4d227", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--e3ca28d4-2eb0-5329-96df-65f6a1363709", "target_ref": "x-oak-tactic--a05710d6-773d-5671-81e6-1a9d53ce156a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b1412ee1-5b03-502c-8983-d32cb3e34635", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--1a600b6f-3cbd-5141-822e-9577e857e9ec", "target_ref": "x-oak-tactic--a05710d6-773d-5671-81e6-1a9d53ce156a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c935c067-aec8-507b-a2c0-121dd91de84e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--888de015-81a7-52ec-9832-87baca164029", "target_ref": "x-oak-tactic--4a289ef4-441e-58b3-869d-49ccfdee57a4" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ce237295-f112-56a2-bdd7-4568f4d5a5d1", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--f7bfa62c-b23c-5fef-a74b-bca3b34cf4df", "target_ref": "x-oak-tactic--4a289ef4-441e-58b3-869d-49ccfdee57a4" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b6c9498f-bd17-5820-b3ee-6bd060697474", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--a4191d6c-02e1-5dae-aa08-2c4f908e10c5", "target_ref": "x-oak-tactic--4a289ef4-441e-58b3-869d-49ccfdee57a4" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e19db5a8-3e04-5032-850d-76f45f2c3378", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--32b4e82c-f2a6-5104-a99e-51eefa81695f", "target_ref": "x-oak-tactic--4a289ef4-441e-58b3-869d-49ccfdee57a4" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--81981c51-0076-54c3-855b-5dd163911183", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--1ee085bf-8883-5633-8d72-6951adb3006d", "target_ref": "x-oak-tactic--4a289ef4-441e-58b3-869d-49ccfdee57a4" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--365127ae-ab7c-5566-b7cd-1e1209f521cf", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--569abf6d-a9fe-53f5-99c8-087ed904d622", "target_ref": "x-oak-tactic--4a289ef4-441e-58b3-869d-49ccfdee57a4" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e7bb3bcc-a794-59b9-9358-2c56e45fd882", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--7a7e61f2-3d7c-5d61-90dc-9e198573731c", "target_ref": "x-oak-tactic--3ec189b1-7483-5eec-bd93-b8191e1c508c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--cb1f9b62-8c54-504f-88a0-f3807d756eee", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--67bf8212-71d7-5c52-87fc-fa40b25fb11c", "target_ref": "x-oak-tactic--3ec189b1-7483-5eec-bd93-b8191e1c508c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--44ebe99a-c93e-58b9-b246-47ff7a68591b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "subtechnique-of", "source_ref": "attack-pattern--67bf8212-71d7-5c52-87fc-fa40b25fb11c", "target_ref": "attack-pattern--7a7e61f2-3d7c-5d61-90dc-9e198573731c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--501796c1-86ca-5ee1-9543-167cf53c9863", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--286d6367-67eb-51d1-8a4b-cb5bc3d012f4", "target_ref": "x-oak-tactic--3ec189b1-7483-5eec-bd93-b8191e1c508c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--fc858951-82b0-5a7b-9a4c-e06506a460aa", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "subtechnique-of", "source_ref": "attack-pattern--286d6367-67eb-51d1-8a4b-cb5bc3d012f4", "target_ref": "attack-pattern--7a7e61f2-3d7c-5d61-90dc-9e198573731c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--cddab174-11bd-5a38-b0c5-ea697f4ce603", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--ba1ed4a4-51a0-58c0-a6ea-3742137d79b9", "target_ref": "x-oak-tactic--3ec189b1-7483-5eec-bd93-b8191e1c508c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3d9f5554-8097-51f2-b1ab-c5248389fe9a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "subtechnique-of", "source_ref": "attack-pattern--ba1ed4a4-51a0-58c0-a6ea-3742137d79b9", "target_ref": "attack-pattern--7a7e61f2-3d7c-5d61-90dc-9e198573731c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--107f42c6-c709-5639-8620-2e981adea70b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--fbe93b94-384c-543f-9ae9-a73850f14a4f", "target_ref": "x-oak-tactic--3ec189b1-7483-5eec-bd93-b8191e1c508c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a9a1fabd-b12e-575e-a759-f0a17a219968", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "subtechnique-of", "source_ref": "attack-pattern--fbe93b94-384c-543f-9ae9-a73850f14a4f", "target_ref": "attack-pattern--7a7e61f2-3d7c-5d61-90dc-9e198573731c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--02e32975-a6cc-5766-8ae5-5fa9fa82b3b4", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--e12a0e1d-8dac-5395-b37b-b0aa20814db2", "target_ref": "x-oak-tactic--3ec189b1-7483-5eec-bd93-b8191e1c508c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2c0c6c2e-5603-5f68-8d1d-7e16c07811b8", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--ff6b56c9-5bc9-5111-be9b-aa70a55951f1", "target_ref": "x-oak-tactic--3ec189b1-7483-5eec-bd93-b8191e1c508c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6bdff579-179a-5e6c-8539-25b795f87505", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--320f06d5-906a-5b2f-a737-01b09ce60315", "target_ref": "x-oak-tactic--3ec189b1-7483-5eec-bd93-b8191e1c508c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e5a77326-e48e-57dc-98bb-5f275c800036", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--980e72bb-7127-51de-9870-d8a88edc74f8", "target_ref": "x-oak-tactic--8bad0643-6df7-5354-80c9-005cb836b58c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--93d3c155-02b6-5305-87d9-70966ad0cfc6", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--b28eb96d-c303-5027-bc7d-413c3659495a", "target_ref": "x-oak-tactic--8bad0643-6df7-5354-80c9-005cb836b58c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--821f69c6-374a-5144-8d8c-093ca589ef14", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--0658ea79-01b4-5c49-bb12-4c6e0876df4e", "target_ref": "x-oak-tactic--8bad0643-6df7-5354-80c9-005cb836b58c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d1e025b3-3de4-5dfd-a2e0-4bc75ff9059d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--846cf1ff-739a-5199-abd6-5f09cc1aeeb0", "target_ref": "x-oak-tactic--8bad0643-6df7-5354-80c9-005cb836b58c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8747c737-ec14-582d-978b-ed8449d2565f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--846cf1ff-739a-5199-abd6-5f09cc1aeeb0", "target_ref": "x-oak-tactic--2e70bb4c-e25c-5123-b9aa-c8f5f53ca2f0" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--da00fc2f-f6d6-5707-b8db-7138fcefa514", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "subtechnique-of", "source_ref": "attack-pattern--846cf1ff-739a-5199-abd6-5f09cc1aeeb0", "target_ref": "attack-pattern--0658ea79-01b4-5c49-bb12-4c6e0876df4e" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--84ac389c-0fbf-5f91-909c-a6b264627bf7", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--80d7913d-0db0-5316-b436-9d914dd8669b", "target_ref": "x-oak-tactic--8bad0643-6df7-5354-80c9-005cb836b58c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5675a773-83a3-5506-9552-a60e5af50bfe", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--c5adc3a0-7ace-5a7f-b629-506415142209", "target_ref": "x-oak-tactic--8bad0643-6df7-5354-80c9-005cb836b58c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--669caa5a-3a46-559d-8f99-08c9f2f13ea2", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--35ec0966-c5f8-584b-a05f-c614dec60791", "target_ref": "x-oak-tactic--8bad0643-6df7-5354-80c9-005cb836b58c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--dfceba54-07b3-5a46-a861-6f4e5d9b175e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--7861ffbc-2d68-5482-ba5f-32e5a630a7a6", "target_ref": "x-oak-tactic--805d835b-8d16-5215-ab2a-a5a008681adb" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a88c4a28-e333-56e9-bfd4-00d371d636b1", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--f0e70cea-8e64-51c4-9f64-09ea2bf642aa", "target_ref": "x-oak-tactic--805d835b-8d16-5215-ab2a-a5a008681adb" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e9a1141c-42f2-5718-8e81-954b7fdd885d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--77b517cc-4b13-5a1b-8262-fb171254ddb5", "target_ref": "x-oak-tactic--805d835b-8d16-5215-ab2a-a5a008681adb" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4be3cb37-8a7e-5893-81b0-e6bb21b011c6", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--78f0aa7b-06b4-5266-b348-58db62932a71", "target_ref": "x-oak-tactic--805d835b-8d16-5215-ab2a-a5a008681adb" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b513c1a1-08d0-57a9-912d-99c917007fc5", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--94a03321-bd42-5ba5-a14c-869236fb3822", "target_ref": "x-oak-tactic--805d835b-8d16-5215-ab2a-a5a008681adb" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8ec5eedb-7ba4-5dd8-92a0-689f07a67b77", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--a7929123-b1d5-5eee-b042-dc7812bdd713", "target_ref": "x-oak-tactic--805d835b-8d16-5215-ab2a-a5a008681adb" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--072a2eca-857d-5754-ae3d-62446b437aec", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--b19923a2-b45b-5106-935d-f52d0d875a94", "target_ref": "x-oak-tactic--85e7f358-8dce-57fe-9f3a-4b0a0a048a69" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2a8d70fa-2778-59a5-bb70-fede823ff043", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--03407478-76ff-57d8-bf96-1cb5b5108d9d", "target_ref": "x-oak-tactic--85e7f358-8dce-57fe-9f3a-4b0a0a048a69" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2fe4b057-2504-5ffd-b993-3b77554cd00e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--523b3321-6fd3-5d53-b04e-bbd114e8f317", "target_ref": "x-oak-tactic--85e7f358-8dce-57fe-9f3a-4b0a0a048a69" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b8521cd6-8c9a-55f8-9f26-76216b090b2b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--3065cec6-1624-5c76-a1a6-417a305ecec3", "target_ref": "x-oak-tactic--85e7f358-8dce-57fe-9f3a-4b0a0a048a69" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f04009c5-4f40-554e-b82c-4fe18421a74a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--ad24b94c-0c7f-5bac-bd56-cf837da9180b", "target_ref": "x-oak-tactic--85e7f358-8dce-57fe-9f3a-4b0a0a048a69" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c0286545-2b71-51b9-a146-65e2ae22df00", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--13ac496a-4463-5007-af2b-d6cc9503a3ac", "target_ref": "x-oak-tactic--85e7f358-8dce-57fe-9f3a-4b0a0a048a69" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--321abe1d-f914-52ce-9d49-90edde338c5c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--473b0aa4-1cea-57d5-a0a1-9114ebeb1de6", "target_ref": "x-oak-tactic--72fc0a09-f385-516c-82bb-a08b6fd3d57c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f6c950d0-4cd8-5abe-8aff-362991edc403", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--fe838439-8aa4-5b23-9494-fde9e1d5637c", "target_ref": "x-oak-tactic--72fc0a09-f385-516c-82bb-a08b6fd3d57c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--96cb6564-ea3b-5457-982d-fc5d00246396", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--3419f870-c58f-5b87-b67d-829b01e4d724", "target_ref": "x-oak-tactic--72fc0a09-f385-516c-82bb-a08b6fd3d57c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a30829eb-9ab1-5c46-94c7-147bbbe6e6db", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--be296581-d897-5922-9a9a-964e99817421", "target_ref": "x-oak-tactic--72fc0a09-f385-516c-82bb-a08b6fd3d57c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7a32b2f5-feac-5f4e-aca0-c45ec800b11c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--df7c55f8-7843-5ec8-af64-44eff860294b", "target_ref": "x-oak-tactic--72fc0a09-f385-516c-82bb-a08b6fd3d57c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--031f922c-dc0a-5874-bd25-c6c5eafcddee", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--a55b5859-fa73-5cab-a342-82b97187ea20", "target_ref": "x-oak-tactic--83a8e7a7-61ec-58d1-a664-22dce505f924" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c6d6c7e0-7455-5c4c-982c-da2e8d790539", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--2e0bf741-b432-58e7-8948-f5599bf0209e", "target_ref": "x-oak-tactic--83a8e7a7-61ec-58d1-a664-22dce505f924" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a148d784-2756-5496-a6d6-2ca3ae7a44e1", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--2e0bf741-b432-58e7-8948-f5599bf0209e", "target_ref": "x-oak-tactic--7fa7f00b-059a-5a92-b145-0893b4530bb6" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ae638dc2-8af6-597e-bac1-0e1521f9a475", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--a6cff4d8-210c-5f75-9fb5-0f3318e8f8c3", "target_ref": "x-oak-tactic--83a8e7a7-61ec-58d1-a664-22dce505f924" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--793a33c0-749e-5f6a-947a-3ab066f9767b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--a6cff4d8-210c-5f75-9fb5-0f3318e8f8c3", "target_ref": "x-oak-tactic--7fa7f00b-059a-5a92-b145-0893b4530bb6" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--cc5445a1-aa48-5c9f-b064-3e01527921e0", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--39564b4f-4af2-5b1a-8405-eb8cf9d2f12b", "target_ref": "x-oak-tactic--83a8e7a7-61ec-58d1-a664-22dce505f924" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--38d62e00-918b-5e2b-9113-eb6f603a25fe", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--39564b4f-4af2-5b1a-8405-eb8cf9d2f12b", "target_ref": "x-oak-tactic--7fa7f00b-059a-5a92-b145-0893b4530bb6" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b39624a8-2e7a-515b-8e9b-85df5a8c7e09", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--c61e4738-96bd-5980-be5f-a99ba4f12408", "target_ref": "x-oak-tactic--83a8e7a7-61ec-58d1-a664-22dce505f924" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--44c30602-bbd7-5ada-b5f9-9277a33dce30", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--c61e4738-96bd-5980-be5f-a99ba4f12408", "target_ref": "x-oak-tactic--7fa7f00b-059a-5a92-b145-0893b4530bb6" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4202811a-895c-5263-8309-7c358081fc3e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--b027592f-baee-5d2a-9d15-925aa1b77941", "target_ref": "x-oak-tactic--c9583e28-ae7b-5589-8d5b-0d4334bcbb6a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b2d99f7a-7ef3-5ca9-a84a-7a139fa5d0bb", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--ea13efc1-d0df-532c-8add-3d39dcd29713", "target_ref": "x-oak-tactic--c9583e28-ae7b-5589-8d5b-0d4334bcbb6a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--44f40f38-d72a-59bd-8e27-26ce6b788c9b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--ea13efc1-d0df-532c-8add-3d39dcd29713", "target_ref": "x-oak-tactic--72fc0a09-f385-516c-82bb-a08b6fd3d57c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--69254cb4-c5f6-52a6-8f6f-2db26c031788", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--b8d62a9c-14cd-503a-af8d-a26b825dffcd", "target_ref": "x-oak-tactic--c9583e28-ae7b-5589-8d5b-0d4334bcbb6a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--74d5356e-81d1-5856-817b-02131fa4f0d9", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--b8d62a9c-14cd-503a-af8d-a26b825dffcd", "target_ref": "x-oak-tactic--b951d3f3-4d67-579b-8cae-b48eed3aa59f" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--afc78cd7-b293-5adf-9655-dfcf371b9989", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--b8d62a9c-14cd-503a-af8d-a26b825dffcd", "target_ref": "x-oak-tactic--72fc0a09-f385-516c-82bb-a08b6fd3d57c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--03b6c096-790f-5712-b378-7ffe37fe4568", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--921bd515-01df-5ee1-a643-7138f8d1ee7c", "target_ref": "x-oak-tactic--c9583e28-ae7b-5589-8d5b-0d4334bcbb6a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--bb84c3ed-bcfd-51b9-bc96-b6b82993246b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--921bd515-01df-5ee1-a643-7138f8d1ee7c", "target_ref": "x-oak-tactic--72fc0a09-f385-516c-82bb-a08b6fd3d57c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--587da112-c4c8-5e37-b7e9-b1e58aab5275", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--03a52b22-ed85-5ba7-9142-73d4e20f0c5a", "target_ref": "x-oak-tactic--c9583e28-ae7b-5589-8d5b-0d4334bcbb6a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a08c18cf-635a-594f-a610-9ef98b876fbd", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--03a52b22-ed85-5ba7-9142-73d4e20f0c5a", "target_ref": "x-oak-tactic--462dc46f-d3c8-5956-9fcd-83fd745b277a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--eef23a24-5e1b-5c18-ab91-dcc9cab25a2f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--051a950d-5407-5e53-9a5f-1c6ab61d0f6b", "target_ref": "x-oak-tactic--c9583e28-ae7b-5589-8d5b-0d4334bcbb6a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--cc8c0295-cba1-544e-8531-3e88d3e09035", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--051a950d-5407-5e53-9a5f-1c6ab61d0f6b", "target_ref": "x-oak-tactic--72fc0a09-f385-516c-82bb-a08b6fd3d57c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5245d3bf-d391-52ee-90ba-eb7f72b09e22", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--58002197-8183-530c-9eea-d2d8532a9008", "target_ref": "x-oak-tactic--462dc46f-d3c8-5956-9fcd-83fd745b277a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e3e5969f-fc4f-5f85-8e61-794aa814dfc4", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--7ec6ff5b-83cd-5725-adda-2b5d3a846414", "target_ref": "x-oak-tactic--462dc46f-d3c8-5956-9fcd-83fd745b277a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a5f1dc72-0495-501c-97aa-4fdf84e6ab56", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--7ec6ff5b-83cd-5725-adda-2b5d3a846414", "target_ref": "x-oak-tactic--7fa7f00b-059a-5a92-b145-0893b4530bb6" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8076858a-98d2-5f2f-af2b-e99d7b08fffa", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--4dd355bc-2389-55c4-911c-1bac3744dbbc", "target_ref": "x-oak-tactic--462dc46f-d3c8-5956-9fcd-83fd745b277a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--dd3eb5ef-3515-50ab-9986-c4e1cac56a6f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--4dd355bc-2389-55c4-911c-1bac3744dbbc", "target_ref": "x-oak-tactic--7fa7f00b-059a-5a92-b145-0893b4530bb6" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d8ed897e-2d58-533f-8ea7-5f7d900c7cb3", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--12a37f6f-1b04-52d2-9ad3-56bca9ba3350", "target_ref": "x-oak-tactic--462dc46f-d3c8-5956-9fcd-83fd745b277a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e5796643-9094-58ec-bc75-c818d555a970", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--92ca3ca4-e512-53c5-be45-1f8b05cc913b", "target_ref": "x-oak-tactic--462dc46f-d3c8-5956-9fcd-83fd745b277a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9e0d2074-bdcc-5f70-9f3e-48e00c673cb2", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--75d94806-bc98-57dc-894c-8ba499eb5540", "target_ref": "x-oak-tactic--462dc46f-d3c8-5956-9fcd-83fd745b277a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2ecc24d5-a4e2-5cb0-97dc-4f5edc704a10", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--79d99263-2431-5abd-bf5f-2869979031be", "target_ref": "x-oak-tactic--462dc46f-d3c8-5956-9fcd-83fd745b277a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0a512ea7-7be8-5840-a340-6af6d6ba9d2f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--419b5ccf-6a56-5639-a130-82e3f14a544e", "target_ref": "x-oak-tactic--462dc46f-d3c8-5956-9fcd-83fd745b277a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--fc84e9db-4cf1-52c8-87eb-5b8c00f84603", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--8e90a636-2bbf-5517-9dc5-1516e3ff0df6", "target_ref": "x-oak-tactic--462dc46f-d3c8-5956-9fcd-83fd745b277a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--bb32042b-fd5f-5c58-a175-a334b4d11e5d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--eaa6f530-4f94-5ca6-b2d9-cbb9f56636a0", "target_ref": "x-oak-tactic--462dc46f-d3c8-5956-9fcd-83fd745b277a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d8744d94-17bc-5493-bcfb-c7899248f220", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--29109eef-abfb-5e17-af48-f9314fad8a9c", "target_ref": "x-oak-tactic--462dc46f-d3c8-5956-9fcd-83fd745b277a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--4462b6be-3eb6-5026-bedc-bf4348f91ab8", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--e1cb4489-0672-54ec-83b8-188a224bac95", "target_ref": "x-oak-tactic--462dc46f-d3c8-5956-9fcd-83fd745b277a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--12851d38-8abd-5350-b49a-7f414b93ac9b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--e1cb4489-0672-54ec-83b8-188a224bac95", "target_ref": "x-oak-tactic--7fa7f00b-059a-5a92-b145-0893b4530bb6" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9affe3aa-35c9-50ea-ac51-38f417d8b3ee", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--453ebde2-a358-531b-99b5-c9b532a849b8", "target_ref": "x-oak-tactic--462dc46f-d3c8-5956-9fcd-83fd745b277a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c06b7da8-47fc-5f59-9faa-d662d45e9a5a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--5deeb2fb-1df3-5566-8229-2e83bd241a08", "target_ref": "x-oak-tactic--b951d3f3-4d67-579b-8cae-b48eed3aa59f" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9b686554-2114-57a4-a520-bf87a55db28d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--647504b6-bc6d-5c30-b18d-82c99e51b62d", "target_ref": "x-oak-tactic--b951d3f3-4d67-579b-8cae-b48eed3aa59f" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0dfce65e-7430-547e-8bed-fd56c09f14ab", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--647504b6-bc6d-5c30-b18d-82c99e51b62d", "target_ref": "x-oak-tactic--7fa7f00b-059a-5a92-b145-0893b4530bb6" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e5bb8b65-12bb-551e-955f-06200b9759ca", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--e66a56f1-221e-5079-bfe4-99ccbe842a5a", "target_ref": "x-oak-tactic--b951d3f3-4d67-579b-8cae-b48eed3aa59f" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b5062734-ef20-5750-a8f8-0e83e9077e46", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--51de129b-35c6-52ab-baa1-4952b944dad8", "target_ref": "x-oak-tactic--b951d3f3-4d67-579b-8cae-b48eed3aa59f" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1ee3f2b2-aea2-57ef-9a18-5530824a10ee", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--51de129b-35c6-52ab-baa1-4952b944dad8", "target_ref": "x-oak-tactic--72fc0a09-f385-516c-82bb-a08b6fd3d57c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--035b70db-93d8-5502-9321-506ac51a38ff", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--cccae07c-951c-54bd-bfa4-af87de266370", "target_ref": "x-oak-tactic--b951d3f3-4d67-579b-8cae-b48eed3aa59f" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ab835e99-2e9b-5257-8e9a-e82fd9fbdbf5", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--cccae07c-951c-54bd-bfa4-af87de266370", "target_ref": "x-oak-tactic--7fa7f00b-059a-5a92-b145-0893b4530bb6" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d59e8c91-b04c-5c8f-b8f8-2ac82f86a01c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--99c728d0-3e0c-55a4-906f-55c349257e5d", "target_ref": "x-oak-tactic--b951d3f3-4d67-579b-8cae-b48eed3aa59f" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--94c5ea26-544b-5e32-bc2a-4fbaceaaf387", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--f65581dd-3a77-50d8-b85f-c0df5e90b22f", "target_ref": "x-oak-tactic--b951d3f3-4d67-579b-8cae-b48eed3aa59f" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e48594f4-aa02-5abd-bccd-420738247ef0", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--f474475e-47e9-57d5-b8d1-35077726b770", "target_ref": "x-oak-tactic--b951d3f3-4d67-579b-8cae-b48eed3aa59f" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--779df7be-8a55-523e-9718-e2996dbedd35", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--f05554c1-f308-5e98-8ef4-af1c993c4752", "target_ref": "x-oak-tactic--b951d3f3-4d67-579b-8cae-b48eed3aa59f" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a1e05b13-0e83-5c7c-94e1-f97f5c3a726d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--d9e4a005-06a9-5cee-9f7c-234e20790118", "target_ref": "x-oak-tactic--7fa7f00b-059a-5a92-b145-0893b4530bb6" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--11bb68bf-d181-5d4b-9eef-f7c2d0dc2637", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--c23370e0-2f94-555e-8e18-e753a767bb51", "target_ref": "x-oak-tactic--7fa7f00b-059a-5a92-b145-0893b4530bb6" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--365c2cb8-518d-5329-aaf1-74466153bc4d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--5a491154-55c8-5abc-8449-0d48df41514b", "target_ref": "x-oak-tactic--7fa7f00b-059a-5a92-b145-0893b4530bb6" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--182e762c-51df-5972-a22c-5e71c616b9da", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--d275621f-df75-55ac-974a-4589472dde87", "target_ref": "x-oak-tactic--7fa7f00b-059a-5a92-b145-0893b4530bb6" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1bf2c697-46b3-5abb-aa91-548d9174818d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--3be95af9-48b3-56a3-8e57-f07ac58e27f2", "target_ref": "x-oak-tactic--7fa7f00b-059a-5a92-b145-0893b4530bb6" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--fa00e414-176f-5bb6-aada-25bb2cbad9d4", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--3be95af9-48b3-56a3-8e57-f07ac58e27f2", "target_ref": "x-oak-tactic--2e70bb4c-e25c-5123-b9aa-c8f5f53ca2f0" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b60f3d9c-299a-5f26-876b-b7d526ca4d4c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--3be95af9-48b3-56a3-8e57-f07ac58e27f2", "target_ref": "x-oak-tactic--d3f737a3-09cc-571c-88eb-d5e9e251167d" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--55e8471a-07db-5ffa-8d4a-607af6639086", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--3be95af9-48b3-56a3-8e57-f07ac58e27f2", "target_ref": "x-oak-tactic--54ff19cd-6a14-595b-be41-49018e597919" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e1f3fb14-862e-5017-ae29-7922bd63020c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--71ecfc99-0efa-5c66-ad46-d0a4851cee1c", "target_ref": "x-oak-tactic--7fa7f00b-059a-5a92-b145-0893b4530bb6" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a93bcbb0-66b5-50cf-aadc-3c0d721fe617", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--71ecfc99-0efa-5c66-ad46-d0a4851cee1c", "target_ref": "x-oak-tactic--462dc46f-d3c8-5956-9fcd-83fd745b277a" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--061da71f-6861-53a0-860b-7131bb2aa05b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--71ecfc99-0efa-5c66-ad46-d0a4851cee1c", "target_ref": "x-oak-tactic--b951d3f3-4d67-579b-8cae-b48eed3aa59f" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e7d18a5c-8af1-5b54-afa3-689104186ebf", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--a019d6df-047d-5759-8cee-e8de54595ade", "target_ref": "x-oak-tactic--7fa7f00b-059a-5a92-b145-0893b4530bb6" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--08f60f09-8276-5947-a25a-80bcc901dd7a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--af731cf1-9b12-550c-b56b-8ad41735e526", "target_ref": "x-oak-tactic--7fa7f00b-059a-5a92-b145-0893b4530bb6" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7c91f4d0-92e2-56b2-8bc7-63b7b23a4c6e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--ddd118a2-e2a6-5f75-93db-10e9f14dcdf9", "target_ref": "x-oak-tactic--5fc49855-8bca-5500-b810-322019badf15" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--dcad10f5-1722-5f17-8594-473964406769", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--e69d7f82-fe18-5677-abba-9dd6347bc5a2", "target_ref": "x-oak-tactic--5fc49855-8bca-5500-b810-322019badf15" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b2579b0d-5c18-519c-b11e-9a9f26b0c83c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--093e472c-281c-5e78-9228-486255d3058a", "target_ref": "x-oak-tactic--5fc49855-8bca-5500-b810-322019badf15" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7924429d-8107-541f-bb7e-afe3c0e4f93a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--a33bad38-8e4f-5cdd-a0a4-779143c81d8d", "target_ref": "x-oak-tactic--5fc49855-8bca-5500-b810-322019badf15" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--61ddcf9d-872f-5d0a-b559-6cddc5c66259", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--a7ebcbb2-dafe-5364-9932-e3d7bee02596", "target_ref": "x-oak-tactic--5fc49855-8bca-5500-b810-322019badf15" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f3762e1d-6bfe-57f9-8830-c0042fa66709", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--2addb763-67df-5522-8864-f3f0d400252a", "target_ref": "x-oak-tactic--5fc49855-8bca-5500-b810-322019badf15" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9e26fe9b-3773-53e0-9cb8-a58dedc75edd", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--c6390ae8-9835-52c2-8fd7-fac5b37acc18", "target_ref": "x-oak-tactic--5fc49855-8bca-5500-b810-322019badf15" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--580cf8b9-7520-5981-86db-db3697ace295", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--fccf2600-ec82-53d1-b3ba-0384a28f8be3", "target_ref": "x-oak-tactic--5fc49855-8bca-5500-b810-322019badf15" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2007ce27-d1d0-599f-bcec-4f5f9f9a3e83", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--07314232-9e18-5d07-b8a6-6ce0ffec7200", "target_ref": "x-oak-tactic--5fc49855-8bca-5500-b810-322019badf15" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6381888f-5da5-507e-ab59-2967a16599b9", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--07314232-9e18-5d07-b8a6-6ce0ffec7200", "target_ref": "x-oak-tactic--d70463dd-edee-5226-9d2b-4921dac73b9b" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--23c7b083-1136-5627-9058-984b65ef31f0", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--28abf537-2707-58ba-99aa-5a6cef69eb87", "target_ref": "x-oak-tactic--5fc49855-8bca-5500-b810-322019badf15" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--58c07a0b-dbe6-5665-885b-748262dedeaf", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--bf6ef44d-fa93-5733-862a-26c1ac15a4b4", "target_ref": "x-oak-tactic--d70463dd-edee-5226-9d2b-4921dac73b9b" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2961789d-f1d5-5579-8ace-3cb0b97edd96", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--1d0e4f47-8c77-58a2-b885-f44145ed3bf4", "target_ref": "x-oak-tactic--d70463dd-edee-5226-9d2b-4921dac73b9b" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--7735d2ef-1881-5c90-9c74-a70f8ead1004", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--7c80fbf5-2de5-5802-a501-b5e28b2e5b10", "target_ref": "x-oak-tactic--d70463dd-edee-5226-9d2b-4921dac73b9b" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b28ed7c7-56c4-5029-b2ac-c5c38ac751ba", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--3d929810-93ce-5bc0-bdcf-2128db844b95", "target_ref": "x-oak-tactic--d70463dd-edee-5226-9d2b-4921dac73b9b" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d0ee1d96-e296-5df0-b8a9-a09299021c32", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--a508cca2-dfea-5831-9bd5-f7d69abe422b", "target_ref": "x-oak-tactic--d70463dd-edee-5226-9d2b-4921dac73b9b" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--27ef49e3-7233-5335-9d23-195506145132", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--f5bce1e3-3637-56df-8db9-94e793306171", "target_ref": "x-oak-tactic--d3f737a3-09cc-571c-88eb-d5e9e251167d" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--32216410-e304-59e3-b901-c03f8fb1c5f7", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--f5bce1e3-3637-56df-8db9-94e793306171", "target_ref": "x-oak-tactic--72fc0a09-f385-516c-82bb-a08b6fd3d57c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8fb066e4-4fcc-57d5-91fe-5a03cf7d1e28", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--f81933a4-bfe2-528f-94ef-399577e5a682", "target_ref": "x-oak-tactic--d3f737a3-09cc-571c-88eb-d5e9e251167d" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b1395a13-1d78-5d2c-a23d-b5cc1f187fe3", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--b6a77deb-14ae-59e3-b4b2-b73065972b6c", "target_ref": "x-oak-tactic--d3f737a3-09cc-571c-88eb-d5e9e251167d" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d700618a-f4ff-531d-904b-b1622dc5e31c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--9b65ffc8-0be6-5809-b228-a85033f790ba", "target_ref": "x-oak-tactic--d3f737a3-09cc-571c-88eb-d5e9e251167d" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f53fd6ae-2ebc-5bcc-be65-5d59a12bad95", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--fd40fed2-9093-5b5a-8ebd-5b288e3ae6c5", "target_ref": "x-oak-tactic--d3f737a3-09cc-571c-88eb-d5e9e251167d" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c472d877-2ea2-5508-bdc9-fb286661cb65", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--b0b659a0-71d1-5943-b57e-96082367adef", "target_ref": "x-oak-tactic--d3f737a3-09cc-571c-88eb-d5e9e251167d" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--723f4114-173a-5563-8c05-0d72a1d209f2", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--b0b659a0-71d1-5943-b57e-96082367adef", "target_ref": "x-oak-tactic--72fc0a09-f385-516c-82bb-a08b6fd3d57c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ae87a1c8-d92b-5942-847f-41fbb7b5bb4a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--5c19685a-578d-5a35-969d-4ad75a1ab78a", "target_ref": "x-oak-tactic--d3f737a3-09cc-571c-88eb-d5e9e251167d" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--41d09d41-d37e-5379-9de8-72655c906e44", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--5c19685a-578d-5a35-969d-4ad75a1ab78a", "target_ref": "x-oak-tactic--72fc0a09-f385-516c-82bb-a08b6fd3d57c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--55398be2-7e10-5913-ac25-21d5ee278fc4", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "subtechnique-of", "source_ref": "attack-pattern--5c19685a-578d-5a35-969d-4ad75a1ab78a", "target_ref": "attack-pattern--b0b659a0-71d1-5943-b57e-96082367adef" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--31a0f39e-5d71-5a5c-960f-fa0295ca868f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--b10815cf-cfad-5b45-97a2-61614ce86053", "target_ref": "x-oak-tactic--d3f737a3-09cc-571c-88eb-d5e9e251167d" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--63a89f6f-3a63-5103-b268-e977a16eaadc", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--b10815cf-cfad-5b45-97a2-61614ce86053", "target_ref": "x-oak-tactic--72fc0a09-f385-516c-82bb-a08b6fd3d57c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5975101a-14c3-512e-9703-61214bd09895", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "subtechnique-of", "source_ref": "attack-pattern--b10815cf-cfad-5b45-97a2-61614ce86053", "target_ref": "attack-pattern--b0b659a0-71d1-5943-b57e-96082367adef" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3e7e3fee-80e5-5eb6-8f8b-4977cd7a4147", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--f783bf18-a6db-5a11-bcbf-3ad4892f9214", "target_ref": "x-oak-tactic--d3f737a3-09cc-571c-88eb-d5e9e251167d" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a810ab15-d291-5dda-b549-f76aa250429c", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--f783bf18-a6db-5a11-bcbf-3ad4892f9214", "target_ref": "x-oak-tactic--72fc0a09-f385-516c-82bb-a08b6fd3d57c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3c3fd4e6-8761-5f47-9c03-15da9a7174cb", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "subtechnique-of", "source_ref": "attack-pattern--f783bf18-a6db-5a11-bcbf-3ad4892f9214", "target_ref": "attack-pattern--b0b659a0-71d1-5943-b57e-96082367adef" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5a17daae-bc11-5fab-b8de-6c1d46041e6b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--6cd5a72f-146d-5a9f-8324-beebe7a70c42", "target_ref": "x-oak-tactic--d3f737a3-09cc-571c-88eb-d5e9e251167d" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a835fce9-30c4-5cbb-9a6c-92d3c21416d7", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--6cd5a72f-146d-5a9f-8324-beebe7a70c42", "target_ref": "x-oak-tactic--72fc0a09-f385-516c-82bb-a08b6fd3d57c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c26ba036-e0d5-5a81-8ada-0b902e9219a5", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "subtechnique-of", "source_ref": "attack-pattern--6cd5a72f-146d-5a9f-8324-beebe7a70c42", "target_ref": "attack-pattern--b0b659a0-71d1-5943-b57e-96082367adef" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6e29b521-b255-5c25-9aa6-f3872ed561e6", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--4811e8a5-d083-595e-b7f6-e0193347aa3e", "target_ref": "x-oak-tactic--d3f737a3-09cc-571c-88eb-d5e9e251167d" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--303ad8b9-b72f-5832-b042-878fe3da41cf", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--4811e8a5-d083-595e-b7f6-e0193347aa3e", "target_ref": "x-oak-tactic--72fc0a09-f385-516c-82bb-a08b6fd3d57c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8d385d89-d1cb-5aca-bb00-1d5da99c24e1", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "subtechnique-of", "source_ref": "attack-pattern--4811e8a5-d083-595e-b7f6-e0193347aa3e", "target_ref": "attack-pattern--b0b659a0-71d1-5943-b57e-96082367adef" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5e467962-56cd-525d-98ef-d62ce8bad41d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--8fea3d14-6b55-534c-986e-1c6f3d1638f2", "target_ref": "x-oak-tactic--d3f737a3-09cc-571c-88eb-d5e9e251167d" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ff81ffe6-da68-53e7-9862-49c50635f49b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--df0b8ece-6ded-558d-9e29-22e289c4243b", "target_ref": "x-oak-tactic--d3f737a3-09cc-571c-88eb-d5e9e251167d" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1b936255-3c00-51e5-9848-69abb5cbc8d1", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--df0b8ece-6ded-558d-9e29-22e289c4243b", "target_ref": "x-oak-tactic--7fa7f00b-059a-5a92-b145-0893b4530bb6" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--221373b8-0c03-5fe9-a419-b686b0d0126d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--3a083d84-7478-5068-afe8-ad797d870993", "target_ref": "x-oak-tactic--d3f737a3-09cc-571c-88eb-d5e9e251167d" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3b3ddefb-2ea2-59d3-8c79-25792b0e083a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--1d4fc21d-4b26-53e8-a8fd-cef3f68b421d", "target_ref": "x-oak-tactic--d3f737a3-09cc-571c-88eb-d5e9e251167d" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a5938290-f308-5f03-af01-9dadd42491cd", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--e9d0e479-5424-55c4-ab48-976a7a671010", "target_ref": "x-oak-tactic--d3f737a3-09cc-571c-88eb-d5e9e251167d" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1b96f556-c24d-5e94-8ad0-36f8876bdf24", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--54be17f0-8dd4-5ea7-8043-93eb5530c507", "target_ref": "x-oak-tactic--d3f737a3-09cc-571c-88eb-d5e9e251167d" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0b8f8398-df91-58c9-98a9-7f2841ae79b9", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--5d6fd913-d256-5849-b154-bff6af32ce81", "target_ref": "x-oak-tactic--d3f737a3-09cc-571c-88eb-d5e9e251167d" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--77747ba8-37cc-5c4c-8b6c-e87ebce0cc79", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--aad54a89-4a6f-5019-a80b-997786799f80", "target_ref": "x-oak-tactic--d3f737a3-09cc-571c-88eb-d5e9e251167d" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--719e53bd-c8fc-5f24-ac00-d2ad25ce5685", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "belongs-to", "source_ref": "attack-pattern--50650ed5-e07d-5fe8-9adf-7adb33f8182e", "target_ref": "x-oak-tactic--d3f737a3-09cc-571c-88eb-d5e9e251167d" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--20318063-54b0-5d2d-8bac-cc7bcb2a34ce", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "attributed-to", "source_ref": "x-oak-incident--ac9dc4b2-8d86-5a33-878a-4c55daf8e9c1", "target_ref": "intrusion-set--59707bbb-48c5-5afb-8aaf-6233fb654e93" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5d28e053-51bd-5325-8c10-364cc3aaba15", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "attributed-to", "source_ref": "x-oak-incident--81390be8-81f6-5e04-b4f4-640accbaaadd", "target_ref": "intrusion-set--59707bbb-48c5-5afb-8aaf-6233fb654e93" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--29f0197c-b42d-5ce5-b792-2c4dea014e9a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "attributed-to", "source_ref": "x-oak-incident--3b4a1767-e43b-571e-977e-3586edd2f19a", "target_ref": "intrusion-set--59707bbb-48c5-5afb-8aaf-6233fb654e93" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--548f760a-103b-519d-bf04-fe5b4ef3b53e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "attributed-to", "source_ref": "x-oak-incident--b332be92-a9ea-51d4-bd10-af626a206bf4", "target_ref": "intrusion-set--59707bbb-48c5-5afb-8aaf-6233fb654e93" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--6972ca85-b3af-5aa7-9fa7-75b90837b9e7", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "attributed-to", "source_ref": "x-oak-incident--75668c80-867b-5962-ab68-1dc279fa8ee2", "target_ref": "intrusion-set--59707bbb-48c5-5afb-8aaf-6233fb654e93" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c603a4d4-e7ac-50f3-b47a-4d2ae5b82a69", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "attributed-to", "source_ref": "x-oak-incident--d76bd295-1f1b-5d4c-96d0-0118bb44b90f", "target_ref": "intrusion-set--59707bbb-48c5-5afb-8aaf-6233fb654e93" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f9fa2cb2-67fa-584b-873e-3cf9d7cce10d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "attributed-to", "source_ref": "x-oak-incident--02efd257-9e16-5569-997a-7f7c6e4fdd52", "target_ref": "intrusion-set--59707bbb-48c5-5afb-8aaf-6233fb654e93" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--102793c0-1ac1-572d-af72-f42f0f22e0b7", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "attributed-to", "source_ref": "x-oak-incident--cd5e2009-3543-546c-8beb-db4d8dc3d387", "target_ref": "intrusion-set--59707bbb-48c5-5afb-8aaf-6233fb654e93" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8af06014-c326-5aa1-bf97-be744307c233", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "attributed-to", "source_ref": "x-oak-incident--6c06afe7-9a91-5d39-8435-db135d4713d6", "target_ref": "intrusion-set--59707bbb-48c5-5afb-8aaf-6233fb654e93" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1cbdb34d-13a9-5c93-927d-1194999ffa89", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "attributed-to", "source_ref": "x-oak-incident--9e09315f-14a3-5ed5-b0bf-0457a174c436", "target_ref": "intrusion-set--59707bbb-48c5-5afb-8aaf-6233fb654e93" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--88b75f16-4c2e-50fc-8af4-026a991afeea", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "attributed-to", "source_ref": "x-oak-incident--adf447b8-da70-5bca-82b7-cb56a8a31ca3", "target_ref": "intrusion-set--59707bbb-48c5-5afb-8aaf-6233fb654e93" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0cdee86d-e311-55bb-afb4-1b0338a002b3", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "attributed-to", "source_ref": "x-oak-incident--ccb266e6-91c1-5c80-ac58-9a7322bf5f1e", "target_ref": "intrusion-set--59707bbb-48c5-5afb-8aaf-6233fb654e93" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--28571dc0-f1eb-562a-baa0-7a5101d13403", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "attributed-to", "source_ref": "x-oak-incident--44e20af0-2810-5a40-86d2-69fbfccbd05d", "target_ref": "intrusion-set--59707bbb-48c5-5afb-8aaf-6233fb654e93" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--90d3742e-fc7c-5a37-a365-9a59f01d4e3b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "attributed-to", "source_ref": "x-oak-incident--8d4706bf-2f58-5775-9c2a-f9835fc03a26", "target_ref": "intrusion-set--59707bbb-48c5-5afb-8aaf-6233fb654e93" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--fdb96a5d-7391-5073-abd0-669d5ea27287", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "attributed-to", "source_ref": "x-oak-incident--fc8bca75-0079-5ce1-b9cc-136d32d48695", "target_ref": "intrusion-set--59707bbb-48c5-5afb-8aaf-6233fb654e93" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d0a97799-2fc1-5c76-babc-1e12d4fa796d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "attributed-to", "source_ref": "x-oak-incident--a213a5e7-cffb-584e-aa10-8eab91a25b4b", "target_ref": "intrusion-set--59707bbb-48c5-5afb-8aaf-6233fb654e93" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--86aaace6-c860-5700-9b2f-a2d4f178401a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "attributed-to", "source_ref": "x-oak-incident--04cd0d07-b8af-5bce-927d-c2d8a4dd9f59", "target_ref": "intrusion-set--59707bbb-48c5-5afb-8aaf-6233fb654e93" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8f9a996c-e564-5f37-86d2-c7928f75dc41", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "attributed-to", "source_ref": "x-oak-incident--4009f089-2779-57db-9616-e8da18dda2f4", "target_ref": "intrusion-set--59707bbb-48c5-5afb-8aaf-6233fb654e93" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--08aa1d98-9b13-54ab-8008-604cf8b5b53e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "attributed-to", "source_ref": "x-oak-incident--279af5b5-5ac8-577f-9c0b-39bfd9554846", "target_ref": "intrusion-set--59707bbb-48c5-5afb-8aaf-6233fb654e93" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--60ad1d8b-4d12-5dc5-892d-05cca0709e56", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "attributed-to", "source_ref": "x-oak-incident--d592c6ff-bfdc-5b88-907e-3e3d8c46415a", "target_ref": "intrusion-set--59707bbb-48c5-5afb-8aaf-6233fb654e93" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--9399d3c0-a914-5744-b1c3-46facd69b3ac", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "attributed-to", "source_ref": "x-oak-incident--1dcf9707-a46e-50d4-aabb-448de9a8d70d", "target_ref": "intrusion-set--59707bbb-48c5-5afb-8aaf-6233fb654e93" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8dc8e247-d944-5dea-b177-f6fef4b7d4ea", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "attributed-to", "source_ref": "x-oak-incident--b52b7b37-157e-5572-af25-9182996b6d80", "target_ref": "intrusion-set--59707bbb-48c5-5afb-8aaf-6233fb654e93" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b7fbab5a-8b9a-5d05-a44f-b28f1e5fa84e", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "attributed-to", "source_ref": "x-oak-incident--484a7428-0b56-513e-bb23-32dfcb3a9c53", "target_ref": "intrusion-set--59707bbb-48c5-5afb-8aaf-6233fb654e93" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--bffbcd10-7db0-561f-9f6a-751fd98cd15a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "attributed-to", "source_ref": "x-oak-incident--61165863-81d5-5804-979f-0b68a222d058", "target_ref": "intrusion-set--59707bbb-48c5-5afb-8aaf-6233fb654e93" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3c113211-234d-5272-908a-5e18a8b0516b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "attributed-to", "source_ref": "x-oak-incident--31c404a6-0440-5307-b594-88fc2e8f740a", "target_ref": "intrusion-set--59707bbb-48c5-5afb-8aaf-6233fb654e93" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0d9c3e2d-c7a2-5017-9590-99391c5926b3", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "attributed-to", "source_ref": "x-oak-incident--b818a054-7d66-5bb2-bee1-7daecd12e39d", "target_ref": "intrusion-set--59707bbb-48c5-5afb-8aaf-6233fb654e93" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--700b5006-3179-524b-9ad9-4c6515df75e4", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "attributed-to", "source_ref": "x-oak-incident--721e1668-d525-5b35-9109-b86c49abd1f0", "target_ref": "intrusion-set--59707bbb-48c5-5afb-8aaf-6233fb654e93" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--2984b8c7-68c0-54a1-8fe3-12363783a20d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "attributed-to", "source_ref": "x-oak-incident--773a4445-53c6-5606-959a-83203e76b6b9", "target_ref": "intrusion-set--59707bbb-48c5-5afb-8aaf-6233fb654e93" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e2499800-b88b-5af7-981a-3284cc185e09", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "attributed-to", "source_ref": "x-oak-incident--f3a58632-0be2-5f97-8bc8-43521a78099e", "target_ref": "intrusion-set--59707bbb-48c5-5afb-8aaf-6233fb654e93" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f5f2e382-a7b8-5ecc-be93-fdeb4170ab59", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "attributed-to", "source_ref": "x-oak-incident--a1334861-4d05-58ae-8ce0-ba1f533c7f91", "target_ref": "intrusion-set--59707bbb-48c5-5afb-8aaf-6233fb654e93" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--06925c0c-8c0e-5bfe-aed5-ddb67c67f731", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "attributed-to", "source_ref": "x-oak-incident--f4c8b967-74ad-530f-964b-2ff43e851fa8", "target_ref": "intrusion-set--59707bbb-48c5-5afb-8aaf-6233fb654e93" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d5e3e516-f26f-5f96-86ef-9e5d170dcfe2", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "attributed-to", "source_ref": "x-oak-incident--05360e76-38e1-5dc2-b5d1-e26dcfa4db31", "target_ref": "intrusion-set--59707bbb-48c5-5afb-8aaf-6233fb654e93" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ffb358f6-86a1-504d-a06f-0cab21967ec3", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "attributed-to", "source_ref": "x-oak-incident--8a9ed543-4d4f-5dd0-bb5f-0255231c9909", "target_ref": "intrusion-set--59707bbb-48c5-5afb-8aaf-6233fb654e93" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--163a7721-4d5e-562d-95d3-de3d702cbd58", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "attributed-to", "source_ref": "x-oak-incident--efb74114-6b83-579c-96ad-29ba4bc61b73", "target_ref": "intrusion-set--59707bbb-48c5-5afb-8aaf-6233fb654e93" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8d545a70-dce0-5d7d-acff-d73e88449ffc", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "attributed-to", "source_ref": "x-oak-incident--a30a082c-da90-55b8-99b1-54b832e1d0d2", "target_ref": "intrusion-set--59707bbb-48c5-5afb-8aaf-6233fb654e93" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--be64b56f-c3ed-53a4-9f30-a4d531cfe19a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "attributed-to", "source_ref": "x-oak-incident--25fe6d24-4133-557d-ae33-9138f74db17f", "target_ref": "intrusion-set--59707bbb-48c5-5afb-8aaf-6233fb654e93" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d2152aa4-0bad-540d-90d2-dc1c55ef6792", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "attributed-to", "source_ref": "x-oak-incident--0ec08dc8-647b-5d3f-afcf-8040391ed1ba", "target_ref": "intrusion-set--59707bbb-48c5-5afb-8aaf-6233fb654e93" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c7845a88-c4ae-54dd-bb40-ceb36af330ab", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "attributed-to", "source_ref": "x-oak-incident--257a278b-0c9c-545f-808f-2880ffed0b70", "target_ref": "intrusion-set--59707bbb-48c5-5afb-8aaf-6233fb654e93" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c40c76a2-e301-5b7e-86cb-3217e391f399", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "attributed-to", "source_ref": "x-oak-incident--1a3327a2-8736-5138-b366-a786170d6547", "target_ref": "intrusion-set--59707bbb-48c5-5afb-8aaf-6233fb654e93" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ed18beea-5c6e-507e-8f5f-ab5d42c781d2", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "attributed-to", "source_ref": "x-oak-incident--6834718b-cfa5-54dd-a294-420a55e162b2", "target_ref": "intrusion-set--59707bbb-48c5-5afb-8aaf-6233fb654e93" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f85894d8-9879-5ec0-adc6-6fa4f0186a9a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "attributed-to", "source_ref": "x-oak-incident--55a04d90-f025-51fb-9f6e-9ebd9eeb482a", "target_ref": "intrusion-set--59707bbb-48c5-5afb-8aaf-6233fb654e93" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--49ad7824-70de-57b1-90f1-81d0644af4a5", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "attributed-to", "source_ref": "x-oak-incident--4ada26d3-7a7c-5e02-a43a-043186e22802", "target_ref": "intrusion-set--59707bbb-48c5-5afb-8aaf-6233fb654e93" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--331955c1-0870-595b-afd5-1765339b3f26", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "attributed-to", "source_ref": "x-oak-incident--0887b044-cc60-5095-860f-75c6bbd80fab", "target_ref": "intrusion-set--9f9bbd23-75c8-5685-9224-6d053ccba386" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--fba8d7c2-6007-5fe5-8170-41dbad8f7187", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "attributed-to", "source_ref": "x-oak-incident--c92f049b-e876-5f05-9caa-5ac83124a266", "target_ref": "intrusion-set--9f9bbd23-75c8-5685-9224-6d053ccba386" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--1f185e59-7dc2-5167-b8e6-7b834c77285a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "attributed-to", "source_ref": "x-oak-incident--038a211b-7010-53d3-88f3-11db96897ab0", "target_ref": "intrusion-set--9f9bbd23-75c8-5685-9224-6d053ccba386" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e1dd8f2e-63f0-5308-97be-e96e55115d01", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "attributed-to", "source_ref": "x-oak-incident--2b1d9ac4-b588-56cf-b965-6d6dc9686921", "target_ref": "intrusion-set--9f9bbd23-75c8-5685-9224-6d053ccba386" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e48959a4-77cf-583a-b646-76484d43d40d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "attributed-to", "source_ref": "x-oak-incident--8cf8579e-04fc-56ba-b7df-22b8bef518a8", "target_ref": "intrusion-set--9f9bbd23-75c8-5685-9224-6d053ccba386" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f495519e-7864-5577-b1c0-39f1e0d2f07f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "attributed-to", "source_ref": "x-oak-incident--92e5dfd0-8ece-518e-9949-8f8acabafcfc", "target_ref": "intrusion-set--9f9bbd23-75c8-5685-9224-6d053ccba386" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8144638a-6087-5f9d-bf02-da51d10ee4fd", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "attributed-to", "source_ref": "x-oak-incident--8b64c7b0-18c1-5059-b378-1e049978d51c", "target_ref": "intrusion-set--3f5d75bc-c34c-5d4a-af7f-80df1166d48c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--84464b50-d9e1-5005-9341-efa96d07001d", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "attributed-to", "source_ref": "x-oak-incident--a213a5e7-cffb-584e-aa10-8eab91a25b4b", "target_ref": "intrusion-set--3f5d75bc-c34c-5d4a-af7f-80df1166d48c" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8d1fb9b9-6f36-5df7-a887-5e7a6ba0a7bb", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "attributed-to", "source_ref": "x-oak-incident--ccdb7c1c-d3cb-5b65-8dd8-a78d0640ae53", "target_ref": "intrusion-set--603fffec-d3ba-5f13-be62-476303b69361" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e5a76bb5-a3af-535e-a96a-ac1cb42b9f46", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "attributed-to", "source_ref": "x-oak-incident--7b01ae06-6b28-59e5-8838-d3adac010d94", "target_ref": "intrusion-set--603fffec-d3ba-5f13-be62-476303b69361" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--71a99056-a91a-53ac-bd42-30980d8c959f", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "attributed-to", "source_ref": "x-oak-incident--d5db53c2-5339-556c-b7a0-3f69da84ae79", "target_ref": "intrusion-set--50ffc35a-f390-56a1-b93c-4af2c94e2889" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--18ce500e-3842-5d46-a91f-d02e5d725578", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "attributed-to", "source_ref": "x-oak-incident--1bc76371-f648-5ae4-b6fb-464177530cc6", "target_ref": "intrusion-set--50ffc35a-f390-56a1-b93c-4af2c94e2889" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5ddacd7a-e03d-5bfd-bf34-f5883490ab8a", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "attributed-to", "source_ref": "x-oak-incident--ccb266e6-91c1-5c80-ac58-9a7322bf5f1e", "target_ref": "intrusion-set--3adb2eec-bad1-5bb3-ba32-1d86e8069b69" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--3a56fa37-bbd7-5080-80eb-28727a52d057", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "attributed-to", "source_ref": "x-oak-incident--8d4aca46-f96b-5437-83c3-07fa4f185b52", "target_ref": "intrusion-set--02bfdd95-e888-5f32-95d8-90fbda1f2e39" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--22cc2bae-b1f5-5839-bec1-872519cfe83b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "attributed-to", "source_ref": "x-oak-incident--314fdac3-8817-5897-a586-d864d7afbe68", "target_ref": "intrusion-set--02bfdd95-e888-5f32-95d8-90fbda1f2e39" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0c6861b0-6cad-5982-b73a-eee737542f0b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "attributed-to", "source_ref": "x-oak-incident--8885e6a7-57c6-5273-8beb-feafaad0d5c4", "target_ref": "intrusion-set--02bfdd95-e888-5f32-95d8-90fbda1f2e39" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--e70c43d2-0eb0-50c3-8dcf-e51cda328153", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "attributed-to", "source_ref": "x-oak-incident--657c8038-be69-5c8f-9555-33bea9c11bf2", "target_ref": "intrusion-set--02bfdd95-e888-5f32-95d8-90fbda1f2e39" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ce584559-7787-5bbc-8c6f-825aaf07d415", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "attributed-to", "source_ref": "x-oak-incident--8d4aca46-f96b-5437-83c3-07fa4f185b52", "target_ref": "intrusion-set--a33c0569-65d6-56bb-9327-211ecf4389ea" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--f38020d2-0316-56a1-8da1-541953b7a7cd", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "attributed-to", "source_ref": "x-oak-incident--314fdac3-8817-5897-a586-d864d7afbe68", "target_ref": "intrusion-set--a33c0569-65d6-56bb-9327-211ecf4389ea" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--b92180d9-1a74-5026-8943-98c7910695da", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "attributed-to", "source_ref": "x-oak-incident--3eb36bc1-589c-5943-aee8-5ad7e3ddcb3f", "target_ref": "intrusion-set--804c8d72-b1bf-566a-9563-9fa07aae1c53" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--48e45e12-59be-5884-9a2d-f1aa8fdb4c9b", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "attributed-to", "source_ref": "x-oak-incident--8885e6a7-57c6-5273-8beb-feafaad0d5c4", "target_ref": "intrusion-set--1b552102-9688-5fb5-adc0-ea710eb9e8ea" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--201be12e-7f01-5a8c-922a-824c028010cc", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "attributed-to", "source_ref": "x-oak-incident--657c8038-be69-5c8f-9555-33bea9c11bf2", "target_ref": "intrusion-set--1b552102-9688-5fb5-adc0-ea710eb9e8ea" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--5a7c3a04-eb29-532f-889c-7bd27c7cd6ca", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "attributed-to", "source_ref": "x-oak-incident--95cfe5ac-b917-5146-b6ad-e599f8e58e8a", "target_ref": "intrusion-set--8c97db8e-c9d4-5005-9a45-580156b179fe" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--96e24cbc-c408-5e63-921f-c091ff744747", "created": "2026-10-12T12:02:49.000Z", "modified": "2026-10-12T12:02:49.000Z", "relationship_type": "attributed-to", "source_ref": "x-oak-incident--47f69d28-12fe-573a-9b4f-a02edd02140c", "target_ref": "intrusion-set--aa580d7c-66c9-58f8-bebe-f94d8b53a40a" } ] }